Cross-Domain Leakage of X Username / UserID due to Dynamically Generated JS File

It was found that twitter.com hosts a specific javascript file whose content is partly dynamically generated, depending on the requestor's user authentication cookie. This dynamic part actually reveals the X's User ID of the requestor. Since the Same-Origin-Policy doesn't apply to javascript file …

self.__INITIAL_STATE__ = {"userId":"█████"};