Demo exploiting the Content Security Policy for cross-origin login-state detection. - View it on GitHub