Lab and CTF write-ups, disclosed findings and client engagements. What I tested, how, and what came out of it.
Stored XSS hosted on the platform's own CDN, through four features sharing one flawed upload policy.
