Rating:

https://rivit.dev/posts/hxp-2022-browser_insanity-pwn/

Original writeup (https://rivit.dev/posts/hxp-2022-browser_insanity-pwn/).