Evading CSP with DOM-based dangling markup | Open Awesome