Weaponized Google OAuth Triggers Malicious WebSocket

  • This looks interesting, This trick is good for hiding the bad code and to bypass the CSP.