Jasper Yu says to YSITD https://blog.securityevaluators.com/hacking-the-javascript-lottery-80cc437e3b7f