Are they blaming Cloudflare’s code for triggering a situation that they did not account for thereby causing the browser to crash? Sounds like a browser problem.
Those bugs also exist(ed?) in other browsers, and from what I understand they worked on fixing them, but they still can’t get through CloudFlare’s blocking after fixing the crash.
