685 million users may be affected by the Branch.io service XSS vulnerability