CVE-2022-29911: Improper Restriction of Rendered UI Layers or Frames

An improper implementation of the new iframe sandbox keyword allow-top-navigation-by-user-activation could lead to script execution without allow-scripts being present. This vulnerability affects Thunderbird 91.9, Firefox ESR 91.9, and Firefox 100...

CVE-2022-34474: URL Redirection to Untrusted Site

Even when an iframe was sandboxed with allow-top-navigation-by-user-activation , if it received a redirect header to an external protocol the browser would process the redirect and prompt the user as appropriate. This vulnerability affects Firefox 102...