Of course, not all XSS vulnerabilities can be identified easily, like in the previous example. There are security controls implemented by developers to do more difficult tasks, such as XSS detection and exploitation.

We are going to review some tips and tricks to cover more potential vulnerabilities and be more accurate in assessing applications to look for bugs.