Linked Presentation: Remote Code Execution from SSTI in the Sandbox: Automatically Detecting and Exploiting Template Escape Bugs