It's a pretty comprehensive article, with proofs-of-concept for several browsers, don't know why you got the impression it's junk.
E.g.
> Browsers—we’ve all got a favorite, and we all use them daily. Even non-browser applications often load resources from external domains, like when using Google Analytics and similar client-side SDKs or embedding scripts or videos.
> With the 0.0.0.0 Day vulnerability,, a single request can be enough to cause damage.
The repetitive "Oligo [Researchers] [discovered/found] ..." adds to this.