A smorgasbord of a bug chain: postMessage, JSONP, WAF bypass, DOM-based XSS, CORS, CSRF... :: jub0bs.com

https://jub0bs.com/posts/2023-05-05-smorgasbord-of-a-bug-chain/