Hacking Slack using postMessage and WebSocket-reconnect to steal your token – https://labs.detectify.com/2017/02/28/hacking-slack-using-postmessage-and-websocket-reconnect-to-steal-your-precious-token