Vickie Li. Practical guide to finding and reporting web vulnerabilities. Complements Chapters 18-23, 36.