CSP violations that printed clickable links into the Developer Tools console — which in turn triggered DNS prefetches pointing at the violating host — created a subtle but real information‑leak that was assigned CVE‑2024‑6612 and fixed in Mozilla products; the short, operational truth is simple...