
Two High-severity findings that both execute before the isolate exists, one reflected XSS that puts attacker data inside a script block, and the timeline that explains why the V8 isolate contributed nothing to either. When a product's…
View original source — Hacker Noon ↗
