The issue concerns the handling of HTTP Strict Transport Security (HSTS) state information. In affected versions, this information is not deleted when a user clears their Safari browsing history, potentially allowing attackers to obtain sensitive information by reading the history file.