Chrome Security: Universal XSS through removing link elements (CVE-2017-5010)

VULNERABILITY DETAILS When a link element is notified about its removal from the tree and the linked stylesheet happens to be the last pending one in the document, the fragment anchor may be updated, which triggers layout updates when it should be forbidden. In special circumstances, the updates...