Chrome Cross Origin Bypass using %09 unicode inside javascript: URI
Fixed in:Google Chrome 4.1.249.1064