Rating: 0

hmac doesn’t include iv -> XSS