"The problem is that JavaScript dialog boxes do not display or include their origin, which allows a new window to open — for example, a prompt dialog box — which appears to be from a trusted ...