@castilho 101 Found XSS where JSON parameter gets rendered into HTML and more...
ALL RESOURCES HUB: GitBook Wiki for Client-Side Hacking. (Notes UI Project Pending...)