This page lives in a sandboxed web renderer. The PocAdBlocker extension's
content script was injected here, so the browser's
ScriptInjectionTracker records this process as having run a
content script from that extension.
The renderer-side patch (simulating post-RCE shellcode) has, at
document-end, sent AddFilteredListenerForMainThread over the
channel-associated extensions.mojom.EventRouter interface,
claiming to be the PocAdBlocker extension. The browser accepted it and
added an active webRequest listener bound to this renderer's PID.
Watch stderr for [POC-LEAK] lines: cross-origin URLs / POST
bodies / headers from the victim tab arriving in this process via
mojom::EventDispatcher::DispatchEvent.