Stealing passwords from infosec Mastodon – without bypassing CSP | Heykuki News