Filedescriptor

The issue is related to a cross-site scripting (XSS) vulnerability. This allows remote attackers to inject arbitrary web script or HTML via a Same-Origin Method Execution (SOME) attack.

A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via an obfuscated form of the `jsinitfunction` parameter. This can be demonstrated by using "jsinitfunctio%gn" as an example of the obfuscated form.

The issue enables a quirks-mode exception that limits the cases in which a Cascading Style Sheets (CSS) document is required to have the text/css content type. This allows remote attackers to bypass the Same Origin Policy via a crafted web site, related to core/fetch/CSSStyleSheetResource.cpp.