https://www.wearesegment.com/research/Mac-OS-X-Local-Javascript-Quarantine-Bypass.html
Of course the file is protected by SIP, so removal is not so simple.
Question
Mac OS X Local Javascript Quarantine Bypass Vulnerability
+16
+24Looks like the fix for it is in High Sierra, but not rolled back to previous OSes, not even 10.11. Great.
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.