Sounds like a security bug in Safari and/or OS X, anyone know if Apple offers bounties like Chrome and Mozilla?