DOM XSS to Account Takeover: Not-So-Dirty Dancing in GIS SDKDiscover how a clever DOM XSS bypass led to an automated account takeover by exploiting OAuth flows in GIS SDK10 min read·blog.voorivex.team6AAADec 7, 2025