Ben Toews

The issue allows remote attackers to bypass the Same Origin Policy and trigger transmission of a CSRF token to a different-domain web server. This is achieved via a leading space character in a URL within an attribute value.

The issue concerns the history-clearing feature in Safari, which does not properly clear the back/forward history of an open tab. This allows physically proximate attackers to obtain sensitive information by accessing an unattended workstation.

The issue allows remote attackers to conduct cross-site scripting (XSS) attacks by uploading a file, due to the failure to prevent HTML interpretation of a document served with a text/plain content type.