[rwth-security] ZeroSSL: XSS leading to session hijacking, stealing a private key