Increase your XSS-fu, win cake
By Darren Pauli, 30 May 2014Google wants to bring new blood into the security bug hunter community with a game launched to test developers' knowledge of cross site scripting (XSS) vulnerabilities.
The XSS Game put devs through six games of increasing complexity that required successful attacks against mock vulnerable web applications.
"The game is designed primarily for developers working on web applications who do not specialise in security," Google wrote on the game page.
"XSS bugs are common because they have a nasty habit of popping up wherever a web app deals with untrusted input.
Full Article