ATTACKER — Cross-Tab XFB Overflow (Rendering Verification)

Open victim page first, then click attack.