    explicit RegistrationCallback(ScriptPromiseResolver* resolver)
        : m_resolver(resolver) { }

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.