Blind Stored XSS in shopify internal Parquet Viewer