DOM based CSS Injection on grammarly.com

**Summary:** An attacker can inject an external css file which can lead to phishing attacks and xss in older browsers.

t.prototype.componentWillMount = function () {
        var e = this.getCtx().nav.waypoint.query,
        t = e.extcss,
        n = e.affParams,
        a = e.minWords;
        this.affParams = n ? JSON.parse(decodeURIComponent(n))  : {
        },
        this.minWords = parseInt(a, 10),
        t …