Update self-xss-2 post

Decaptialize System 2, add summary and bugs