This is a technical companion post to https://xbow.com/blog/xbow-built-a-chrome-full-chain-exploit