This is a security fix:

1. Fixed a security issue where attackers could hijack the page. (Only affect visitors using out-updated browsers. If you are using a modern browser that supports CSP, you were not affected)