🎯 Bitcoin XSS - Targeted Bundle.data Attack

🎯 XSS Attack Vector

Path: SDK → okxBtcJSBridge → Hse.java → Hzv.java → bundle.data → evaluateJavascript()

Vulnerable Methods: signPsbt, signPsbts, pushTx, pushPsbt

Target: bundle.getString("data") in Hzv.java lines 87, 121, 148