Could you also check this vulnerability?: https://www.brokenbrowser.com/revealing-the-content-of-the-address-bar-ie/