Why is Cross-Site Scripting (XSS) still the most common web vulnerability? The theory of identifying XSS is pretty straightforward, there are many static analysis tools created to detect it and yet there are so many undiscovered vulnerabilities. So, what gives?
This is a companion discussion topic for the original entry at https://blog.crowdbotics.com/fantastic-vulnerabilities-and-where-to-find-them-part-1-cross-site-scripting-with-django-form-errors/