NUCS Security Test

Security test page — authorized penetration tester NUCS — 2026-11-04

CSP Bypass PoC: Stored XSS with CSP bypass via OneTrust consent manager gadget (strict-dynamic trust propagation).

If you see an alert box showing the domain name, the CSP bypass is working.