LINE client for iOS before 10.16.3 allows cross site script with specific header in WebView.Referenceshttps://hackerone.com/reports/988332
