EIP-2026-104576

This exploit demonstrates a DOM-based XSS vulnerability in Mac OS X's rhtmlPlayer.html, allowing arbitrary JavaScript execution outside the quarantine sandbox. The PoC leverages .webloc files and a data URI to bypass Apple's Quarantine mechanism.