Using Chrome's Web-Custom-data UTI to Inject a Stored XSS in Slack

labs.detectify.com