Breaking out of restricted mode: XSS to RCE in Visual Studio Code

TheHole New World - how a small leak will sink a great browser (CVE-2021-38003)

The Cat Escaped from the Chrome Sandbox