Reflected XSS in Yahoo: A $700 Bug Bounty Write-Up

A URL path, a JavaScript popup, and a lesson in safe output handling. In August 2017, while I was still getting started in bug bounty hun...