I looked into the Ninja Cookie extension and found it really sloppy with security. I don’t know why after three months they only managed to address the biggest issue, they never wrote back after acknowledging my initial report. #infosec #xss
https://palant.info/2021/05/04/universal-xss-in-ninja-cookie-extension/