unsigned long long PerformanceNavigationTiming::GetTransferSize() const {
  return resource_timing_info_->TransferSize();
}

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.