Injecting an isAdmin: true property into the prototype so that every user session is treated as an administrator.

Identifies a vulnerable merge function in the cart.js or admin.js file.

In many versions of the "Moan Shop" challenge, the vulnerability is .