Most google spread sheet xss related news are at:

xs-sniper.com
– Billy (BK) Rios
Tridium Niagara – Directory Traversal 26 Nov 2012 | 05:30 pm
In July of this year, I wrote about some of the frustrations I encountered when working with Tridium and trying to get them to fix various issues with their Niagara framework. The Niagara framework is...
Content Smuggling 11 Oct 2012 | 11:00 pm
A few years ago, I discovered a peculiar design decision described in the PDF specification. This design flaw allows for an attacker to conduct XSS attacks against some websites that would not normall...