https://superevr.com/blog/2012/top-level-universal-xss/ > A flaw in Internet Explorer could expose users to JavaScript exploits and Universal XSS by abusing the way the browser classifies websites into specific security zones.