Last time there was an xss vulnerability on nostr (anigma) lots of people leaked their nsecs