Firefox for iOS Reader View replaced page content in its HTML template before replacing other internal placeholders. A malicious page could include a placeholder string that was later substituted with JSON-LD data, potentially resulting in arbitrary JavaScript execution. This vulnerability was fixed in Firefox for iOS 151.2.
2026年9月4日
CVE-2026-9308 [MEDIUM] – Firefox for iOS Reader View replaced page content in its HTML template before replacing ot
📑 文章目录



