webpack: Webpack's AutoPublicPathRuntimeModule has a DOM Clobbering Gadget that leads to XSS · Teire