1 matches found
Electron drops inherited HTML sandbox restrictions for popups opened through OpenURLFromTab
Impact Popups opened from a sandboxed iframe through a link for example target="blank" or a middle-click did not inherit the iframe's HTML sandbox restrictions. Content that was meant to run sandboxed could open a popup with the embedding app's full origin, gaining access to that origin's cookies...
8.2CVSS5.8AI score
SaveExploits0References9Affected Software1
20