@thomasfuchs But a security fix that causes websites to run arbitrary code sounds bad. Is there a negation missing?