How He Found a $5,000 Google Maps XSS (by Fiddling with Protobuf)