Javascript Destructuring and Untrusted Data
While digging through a Javascript application, looking for bug bounty opportunities, I found an interesting case of destructuring giving a false sense of security about the contents of an untrusted string.
Source: Javascript Destructuring and Untrusted Data, an article by Pete Corey.