Spent the past hour trying to xss multiple google websites

comments

you might have more luck looking for IDORs/other authentication issues, rather than XSS.

oh yeah ig they could just use like dompurify and it wouldn’t work

Who would’ve thought that a massive tech company would have great security?

I mean, its to be expected but still