Javascript attacks

Meteor Framework

Meteor.connection._methodHandlers

Reference: https://www.offensive-security.com/offsec/wekan-authentication-bypass/