> Through poor security or malicious action that app leaks that information to third parties. It's neither poor security or malicious action. Web site isolatio

> Through poor security or malicious action that app leaks that information to third parties. It's neither poor security or malicious action. Web site isolation rules by design give full privileges to any third party script the website includes. If a website uses facebook login, all third party scripts can access the facebook user name.