    function onLoad() {
        return new Promise(function(resolve) {
            window.addEventListener('load', resolve, true);
        }).then(iframeLoaded);
    }
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.