Security researcher Brian Hyde was accepted into Synack Red Teams private bug bounty platform and discovered a Reflected XSS vulnerability on one of their programs. The difficulties he faced in exploiting this cross-site scripting (XSS) vulnerability, and the workarounds he developed during his research, are highly informative and worth investigating.

Read full news article on Dzone