Abusing Chrome's XSS auditor to steal tokens | Hacker News Reader