Awesome find and write up. Wondering why you did not get the full $7500 for this
https://www.google.com/about/appsecurity/reward-program/inde...
How come accounts.google.com more severe than others for XSS ?
https://www.google.com/about/appsecurity/reward-program/inde...
How come accounts.google.com more severe than others for XSS ?
Because that's where the jewels are: "Control, protect, and secure your account, all in one place"