2 extreme exploits on minecraft.net (website) - angular javascript

there are 2 problems involving angular javascript on minecraft.net, 

1: XSS in angular js, this could cause account details, and even banking information to be stolen using javascript

2: prototype pollution attacks in angular javascript. function "merge()" can be exploited using a _proto_ payload