Card skimmers were found in 1x1 pixel SVG images, apparently deployed through PolyShell.
are used for dynamic import requests. setTimeout() calls below can't be wrapped (e.g. by step_timeout()) because wrapping setTimeout() would set active scripts differently.
Tests access of cached DOMWindow properties after the associated frame is removed from a web page and garbage collected. Test should not crash and properties should be set to reasonable defaults as ...