Exploitation and analysis of XSS vulnerabilities, study of CSP mechanisms in a controlled environment.