WS-2023-0188

Brave for iOS protects privileged JS to native bridges by using random JavaScript handler names and security tokens. However, by altering window.braveBlockRequests property from scripts on the web page, these secret values can be stolen. The impact depends on which bridge is abused. As further...

WS-2023-0185

New XSS vector in brave-ios in ReaderMode with %READER-TITLE-NONCE%: A relaxation of a CSP rule can be exploited for XSS attacks on ReaderMode pages. As a result, any cross-origin pages, that has been converted to ReaderMode, can be stolen and an attacker can gain access to Brave's privileged pag...

Brave Software: Security token and handler name leak from window.braveBlockRequests

Vulnerability description not provided...