The bug inside iOS would inadvertently re-enable JacaScript inside Mobile Safari without user interaction after they visited a webpage with one of Apple's new Smart App Banners.
Smart App Banners are used by websites to promote Apps on the app store.
A Smart App Banner being used on the Macworld UK website
Apple's release notes state:
Sign up for CIO Asia eNewsletters.