auditing tor browser 15 safer for wasm leftovers: a local file:// worker keeps WebAssembly.compile while https workers do not