Route Discovery in SPAs: Security Testing with Headless Browsers November 28, 2025 7 min read Building a custom tool for discovering hidden routes in Single Page Applications using headless browser automation security spa reconnaissance selenium automation owasp