WS-2023-0184

Brave iOS has three weaknesses. By combining them, Universal XSS can be achieved. First issue - Exposure of UserScriptManager.securityToken Playlist.js embeds the exact value of the $ into HTMLVideoElement.prototype.setAttribute. By reading the value, an attacker can retrieve the hidden security...