How best to present a security vulnerability to a web development team in your own company?
- by BigCoEmployee
Imagine the following scenario:
You work at Big Co. and your coworkers down the hall are on the web development team for Big Co's public blog system, which a lot of Big Co employees and some public people use. The blog system allows any HTML and JavaScript, and you've been told that it was a choice (not by accident) but you aren't sure if they…