Remind me again what the ratio of browser sandbox escapes coupled with full RCE is between JS, CSS, and SVG?