Weak. The console tab of Chrome's developer tools allow arbitrary code execution. That example is not a security violation, ergo arbitrary code execution is p

Weak. The console tab of Chrome's developer tools allow arbitrary code execution. That example is not a security violation, ergo arbitrary code execution is potentially but not necessarily a security violation. A valid remediation requires more than just arbitrary code execution, such as privilege escalation or leaking containment.