davidmarne-wf

@braveulysses any chance at getting fix in here, or at least an answer as to [why the json creator for AddOperation has this clause](https://github.com/pingidentity/scim2/commit/4b3d63c7c22ec044f5da4bb14848ac1366a3fa13#r35642158)?

@braveulysses @lance-purple-unboundid any updates?

@jgrandja thank you so much for all of the discovery you've done here, and for all info you've provided on this subject! while i agree with your takes for the...

@Tandolf >I fail to see how a sandboxed environment can prevent for instance a XSS attack in a mobile application that stores a tokens that running code can access. Yea...