CVE-2026-22072: Improper Input Validation

Loading arbitrary external URLs through WebView components introduces malicious JS code that can steal arbitrary user tokens...