Benb

The issue allows remote attackers to obtain sensitive information by querying the browser's session history. This is due to the CheckLoadURI function listing the about: URI as a ChromeProtocol, which can be loaded via JavaScript.