With plasma-browser-extension activated, the extension inserts a rogue <script> tag into XML documents (visit the URL for a demo)
https://cgit.kde.org/scratch/davidedmundson/plasma-browser-integration.git/commit/?id=5226ccce0b5e36b4f1b80dd603aef7a06798c61f