Victim Page (vtm.zoomz.cc)
This page embeds TestApp for cross-storage, and also loads an "ad" (the attacker).
TestApp iframe (trusted)
testapp.livesdk.dev
Ad iframe (attacker)
atk.zzz2.dev
Victim's Storage Operations
Namespace:
Key:
Read from TestApp storage
Write legitimate value
Read all keys
Last read value:
-