Google noted that if the HTTP status code is non-200 (for example, on error pages with 404 status code), rendering might be skipped.

Static AES keys are enabling attackers to decrypt access tokens and reach remote code execution, triggering urgent patch ...