CVE-2009-1703 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2009-1703): WebKit in Apple Safari before 4.0 does not prevent references to file: URLs within (1) audio and (2) video elements, which allows remote attackers to determine the existence of arbitrary files via a crafted HTML document.
According to https://bugs.gentoo.org/show_bug.cgi?id=287494#c0, this issue was fixed in =net-libs/webkit-gtk-1.1.10. Updating status to [glsa], so it shows up in reports accordingly.
Presumably all affected versions are gone from tree. Closing as discussed with keytoaster. No GLSA for you.