1. Click on the "click to start" text
2. A new tab will open
3. A refresh will occur every 1 second
4. If the bug is executed, this page will be changed to google.com
To understand why this is weird, have a look at x.html
This works on Firefox. To properly trigger the bug, the page should be loaded in a private Tab.
The first proof of concept works without the need for private tabs, but it was way to big.

click to start