Rook to XSS: How I hacked chess.com with a rookie exploit