18 Aug The Schema Blind Spot: Deconstructing XSS via Object Injection in Form Parsers 18 Aug 2026 4 min read