Browsing: WebAuthn assertion vulnerability