A security researcher has vowed to reveal technical details of a series cross-site scripting vulnerabilities involving Facebook applications during September. theharmonyguy plans to give developers 24 hours advance notice about flaws involving their web applications before exposing them publicly. The project takes its cue from July’s Month of Twitter Bug project, during which security researcher Aviv Raff applied a similar idea to the disclosure of security flaws involving Twitter and associated services