JavaScript Library Introduced XSS Flaw in Google Search
A change made several months ago in an open-source JavaScript library introduced a cross-site scripting (XSS) vulnerability in Google Search and likely other Google products.
Read more: JavaScript Library Introduced XSS Flaw in Google Search
Story added 1. April 2019, content source with full text you can find at link above.