I'm looking forward to the first XSS vulnerability that exploits a WASM module. Control flow integrity looks correct (WASM has a separate return stack, call and

I'm looking forward to the first XSS vulnerability that exploits a WASM module. Control flow integrity looks correct (WASM has a separate return stack, call and call_indirect validate callee signatures), but use after free and buffer overflows are still possible.