HackerOne interview question

LDAP, DOM XSS, Blind SQL