A Same-Origin Policy bypass vulnerability in WebKit allows cross-origin data access.