Bypassing modern XSS mitigations with code-reuse attacks
blog.truesec.com