Llamakko

The issue is related to errors in the implementation of the back button functionality. It can be exploited by a remote attacker to spoof the address bar using the `history.back` method and the `location.protocol` property. This could potentially allow an attacker to deceive users about the actual website they are visiting.

The issue allows remote attackers to bypass the Same Origin Policy. This can be achieved via specially crafted data: and view-source: URIs. The vulnerability is related to the lack of protection for service data, which can be exploited by a remote attacker to bypass existing access restriction policies.