PoC: Telegram Web K XSS

Status: Injected into parent context.