Weaponized Google OAuth Triggers Malicious WebSocket

This looks interesting, This trick is good for hiding the bad code and to bypass the CSP.