This is "well known" research that resurfaces every other year. Let me tell you a story how I have heard about this in 2012 and putting it into perspective.

Research "Scriptless Attacks –
Stealing the Pie Without Touching the Sill" (2012):
+ Paper: htt…