@waf_bypass Impressive bug chain from @ptracesecurity: postMessage, JSONP, WAF bypass, DOM-based XSS, CORS, CSRF… ? Learn more about #Pentesting, #CyberSecurity and #Infosec here: https://t.co/cvPJMdPrZH ? #ShareAndLearn