KURL HTMLAnchorElement::href() const
{
    return document().completeURL(stripLeadingAndTrailingHTMLSpaces(getAttribute(hrefAttr)));
}

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.