Any website could control Urban VPN's Chrome extension with "Toad"

amibeingpwned.com