@sysbraykr dives into a range of security issues – from postMessage to DOM-based XSS – like a ?! Check out their article for the full story: ?