This issue was addressed through improved state management. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, visionOS 2.4. A website may be able to bypass Same Origin Policy.Referenceshttps://support.apple.com/en-us/122371https://support.apple.com/en-us/122373https://support.apple.com/en-us/122378https://support.apple.com/en-us/122379
