:Bobowen

The issue arises from improper implementation of certain DocShell inheritance behavior for the sandbox attribute of an IFRAME element. This allows remote attackers to bypass intended access restrictions via a FRAME element within an IFRAME element.