Bypass SOP, Theft Your Data - XSS Allstars from Japan / OWASP AppSec APAC 2014
Chrome-eject がこの先生きのこるには