ZeroSSL: XSS to session hijacking, stealing a private key (and password hash)groups.google.com112 pointskkm3 years ago