Cross-site scripting attacks in action and how to protect against them

Write-up

In this blog post, my colleagues at Outpost24 and I walkthrough some of the wilder Cross-Site Scripting attacks we’ve managed to conceive recently, and highlight the importance of considering context when crafting an impactful exploit.