Apple Webkit - Universal Cross-Site Scripting by Accessing a Named Property from an Unloaded Window