WS-2023-0204

HTML injection in title of reader view in Brave: Reader.html in doesn't escape/trim HTML tags in %READER-TITLE%. This allows any page to inject malicious HTML code in reader-mode page through html code you want to inject...