postMessage() II
This exercise covers how insecure calls to the JavaScript function postMessage() can be used to leak sensitive information when a listener does not filter the origin
Course
Make sure you check out PentesterLab PRO and PentesterLab PRO Enterprise to develop your skills.