If you're interested in the how, who, what and where, there's a more chatty account of how this vulnerability was discovered, reported, fixed and disclosed here

If you're interested in the how, who, what and where, there's a more chatty account of how this vulnerability was discovered, reported, fixed and disclosed here: https://ivan.barreraoro.com.ar/signal-desktop-html-tag-injection/ https://ivan.barreraoro.com.ar/signal-desktop-html-tag-injec... (submitted yesterday at https://news.ycombinator.com/item?id=17070032 https://news.ycombinator.com/item?id=17070032)