Comment by thwaysec

The browser is allowing remote code to talk with 127.0.0.1