Stealing GitLab OAuth access tokens using XSLeaks in Safari
about.gitlab.com