Drag and Pwnd: Leverage ASCII characters to exploit VS Code | PortSwigger Research

https://portswigger.net/research/drag-and-pwnd-leverage-ascii-characters-to-exploit-vs-code