Content security policy blob script src July 8, 2019 16 32 64 128 Content spoofing poc Broken link hijacking vulnerability Broken link hijacking poc