"With the current attack (CSS/HTML only), it will just freeze Safari for a minute then slow it down," the researcher ... likely crash any app that's capable of loading a web page.