Remember when some keys were stolen because of XSS in a client developed by Supertestnet?