If you ran your browser as root and configured your browser to load local resources on non-local domains maybe. I think you can do that in chrome://flags but you have to explicitly list the domains allowed to do it.

I’m hoping this is just a bad joke.

If you find something, report it. Don’t experiment on the public.

https://www.bugcrowd.com/resources/guide/what-is-responsible-disclosure/

When you can press “Go” and dozens of little green lights light up? That’s the stuff.