Quick browser documentation PoCs (nothing new, just some PoCs to try it): Postmessage with null origin and null source- insert-script.com/examples/ifram… Authorization header and redirects - relevant for client side path traversal insert-script.com/examples/redir…