When using Assistant in code mode (Sonnet), when asked to write down a style tag that does something, it executes that tag and renders it in the page while the output is being streamed, flashing the result on the screen for a second or two. The output is not being sanitized while streaming the result.
Also works on the Android app.
Just output the code without rendering the style tag.