How mXSS attacks change everything we believed to know so far