[charcircuit]

Suspiciously the authors do not say if this works in restricted mode. This is not considered a vulnerability outside of restricted mode.