A smorgasbord of a bug chain: postMessage, JSONP, WAF bypass, XSS, CORS, CSRFjub0bs.com 1jub0bs3ydiscuss
Fearless CORS: a design philosophy for CORS middleware libraries and a Go impljub0bs.com 1jub0bs3y1 comment