This is an update to the information in this advisory.
The information in the advisory has been reviewed and approved for publication by the W3C Security Committee.
For further information on this topic, see the WCC Blog.
Acknowledgments The W3CE Security Committee thanks the following organizations for their contributions to this advisory: Google Cloud Platform, Inc. Google Inc. Microsoft Corporation Microsoft Research W3C.
W3CA.org (c) 2018 The W5 Trust, Inc., www.trust.org