Document* FetchManager::Loader::GetDocument() const {
  if (execution_context_->IsDocument()) {
    return ToDocument(execution_context_);
  }
  return nullptr;
}

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.