Cross-Realm Isolation Failures in JavaScript Sandboxes | Synapse