https://10alert.com/posts/dom-based-extension-clickjacking-exposes-popular/