int32_t TestURLLoader::OpenUntrusted(const pp::URLRequestInfo& request,
                                     std::string* response_body) {
  return Open(request, false, response_body);
}

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.