    function iframeLoaded() {
        var iframes = Array.from(document.querySelectorAll('iframe'));
        return Promise.all(iframes.filter(function(iframe) {
            return iframe.src;
        }).map(function(iframe) {
            return new Promise(function(resolve, reject) {
                iframe.addEventListener('load', () => {
                    resolve();
                }, true);
                iframe.addEventListener('error', reject, true);
            });
        })).then(delay(sysend.timeout));
        // delay is required, something with browser is not intitled properly
        // the number was pick by experimentation
    }
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.