Processing maliciously crafted web content may disclose sensitive user information due to a cross-origin issue. This is caused by insufficient tracking of security origins, which are the sets of origins that are allowed to access resources from a specific origin.