XSS
appsec.fyi
How I Turned Self-XSS into Reflected XSS (and Bypassed the WAF)
2026-09-04
The WAF Blocked My XSS — So I Rotated What It Was Reading
2026-08-26
What's in a tag name? JavaScript, apparently
2026-08-26
DOM Purify - dirty namespace bypass
2026-08-17
Make Self-XSS Great Again
2026-08-17
More XSS →