The flaw would allow a phishing attack in which a malicious JavaScript pop-up window ... revealing data such as a password. "The problem is that JavaScript dialog boxes do not display or include ...