Evading CSP with DOM-based dangling markup | Hacker News Reader