WS-2023-0187

There are three weaknesses in Brave's FIDO U2F implementation. At first, u2f.register can be executed from cross-origin subframe by invoking U2F.postMessage directly Second issue - FIDO related modals show the name of top frame origin but not caller subframe Third issue - The version parameter se...