Find an XSS on an out-of-scope/sandboxed domain? Check how Cookie Tossing helps demonstrate the impact in this new @0xReconless video! Featuring @S1r1u5_'s bug on Google AI Hub where he abused a hidden feature in Tornado Web Server on JupyterLab.
https://t.co/eUrnFRf01n