A smorgasbord of a bug chain: postMessage, JSONP, WAF bypass, XSS, CORS, CSRF | Dark Hacker News