4 ms·> Would moving the untrusted content to be served from a separate domain entirely close the hole? Yes.by cxr 4mo ago> Would moving the untrusted content to be served from a separate domain entirely close the hole? Yes.