postMessage information disclosure leads to stored XSS

[**Full Writeup**](https://ctf.zeyu2001.com/2021/inctf-2021/md-notes)