CVE-2020-6506: Chromium WebView XSS via window.open()
Parent page on