This PoC steals user information such as first and second name using timing attacks and jQuery selectors.