4 ms·

But XSS isn't novel by any stretch of the imagination, so there's no "disclosure" going on here at all.