0.0.0.0 Day: Exploiting Localhost APIs From the Browser | Oligo Security

https://www.oligo.security/blog/0-0-0-0-day-exploiting-localhost-apis-from-the-browser