Embed-SDK origin-bypass PoC — attacker host
This page's origin:
(must contain https://burgerprofiel.beta-vlaanderen.be to pass the LV gate)
Framed route:
| XSS fired:
no