WebKit suffers from a cross site scripting vulnerability via a synchronous page load. Continue reading...