Exfiltrating Data from Sandboxed Documents

Lessons Learned From Exposing Unusual XSS Vulnerabilities

Bypassing CSP via URL Parser Confusions : XSS on Netlify’s Image CDN

Type confusion attacks in ProseMirror editors

Universal Code Execution by Chaining Messages in Browser Extensions

Self-XSS to ATO via Site Features