if verifiable: chromedp alert box detection: https://stackoverflow.com/questions/58085607/chromedp-handle-alert

if not verifiable: run js in dev console to verify exploit