Prototype pollution flaws are "the next big thing" in JavaScript security research.

The latest JavaScript specification standardizes a well-balanced and thoughtful set of features, including the built-in global Iterator, new Set methods, improvements to regular expressions, and more.