**tl;dr**

* Unintended Solution: Cookie Path Restriction bypass using pop-up windows + JS Sandbox Escape
* Intended Solution: Service Workers + JS Sandbox Escape