xss15 blog post at http://sluggerotoole.com/2015/06/11/xchange-summer-school-2015-bravery-in-the-face-of-challenge-xss15/