[Bug 1100968] VUL-0: CVE-2018-10895: qutebrowser: Cross-site request forgery flaw allows sites to access 'qute://*' URLs and execute arbitrary code