https://allelesecurity.com/asa-2020-00043/
ASA-2020-00043 - WhatsApp Desktop: Cross-Site Scripting (XSS) through a specially crafted live location message