Cookie-nabbing App Could Have Served Users Side Helping Of XSS warber