Exploiting Web3's Hidden Attack Surface: Universal XSS on Netlify's Next.js Library

Universal XSS in Netlify's netlify-ipx library gave persistent cross-site scripting and full-response SSRF on any Next.js site—impacting PancakeSwap, Gemini, Docusign and more; fixed in two days.