+- Sinisterly (https://sinister.ly)
+-- Forum: Hacking (https://sinister.ly/Forum-Hacking)
+--- Forum: Website & Server Hacking (https://sinister.ly/Forum-Website-Server-Hacking)
+--- Thread: Bronze uXSS vulnerability on IOS Chrome (/Thread-Bronze-uXSS-vulnerability-on-IOS-Chrome)
uXSS vulnerability on IOS Chrome - Cr3aTor - 10-20-2018
I was browsing the internet as usual and I stumbled upon a really interesting vulnerability. It's based on how Chrome parses the URL and how WebKit parses it.
This difference on parsing is giving the attacker the chance to do a uXSS !!! I find this bug report pretty cool so if you want to research more about it, here are some resources that might help:
- https://bugs.chromium.org/p/chromium/issues/detail?id=841105
- https://www.youtube.com/watch?v=2MslLrPinm0
- https://www.youtube.com/watch?v=0uejy9aCNbI