A researcher named Dhruv emailed us to report a stored XSS path: someone attaches a PDF with embedded JavaScript to a support ticket in our helpdesk product, and when a support agent opens it, the script runs "in the context of the application. " What we found when we checked The download route h...
Source: [Dev.to](https://dev.to/hamzezn/a-stored-xss-report-we-couldnt-quite-reproduce-and-hardened-anyway-5f1i)