void Performance::clearResourceTimings() {
  resource_timing_buffer_.clear();
}

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.