Roderich Schupp Sun, 11 Dec 2016 04:00:29 -0800
I just realized that I'm running policykit-1 from experimental (0.113-5). The version in unstable/testing (0.105-7) is not affected, as it isn't build with JavaScript support. So may downgrade the severity of this bug.
Cheers, Roderich