Google has openly stated that it takes web security very seriously, but the company might be playing around a bit by releasing a browser-based challenge created to test developers’ understanding of XSS. Allegedly made by Google’s security team, the game features six levels that resemble real world applications vulnerable to XSS. Players are tasked with finding a level’s problem and exploiting its weakness.

expand full story