XSS in hidden fields via “accesskey” attribute

One of Portswigger Academy’s XSS lessons involves triggering a JS payload when a user presses a key combo, but it doesn’t seem very practical to me. Is there any use case that I’m missing or a better way to do this? For example, if you’re using chrome …

Read More >>