Collected research
Get pwned by scanning QR Code
Get Pwned By Scanning Firefox QR Code Reader
Firefox for iOS executed javascript URIs supplied by its built-in QR code scanner, so scanning a crafted code ran script in the context of the page the user was already viewing and could read its contents and cookies. It also worked in reader mode, on local files and internal pages, and ignored the site's content security policy. Opera Mini for iOS was affected too.
Record
- Document
- Get Pwned By Scanning Firefox QR Code Reader
- Researcher
- Nikhil Mittal
- Published by
- Payatu
- Date
- Topic
- Other
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of Nikhil Mittal, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .