XSS is way simpler (and scarier) than I thought One careless innerHTML and your page runs someone else’s code. June 28, 2026 tags:xssweb-securityjavascript