3 ms·
It only works on mobile (not Firefox) and on Safari. It's also easy to abuse [1] [1]: https://blog.redteam.pl/2020/08/stealing-local-files-using-safari-web.ht
by timendum 6y ago
It only works on mobile (not Firefox) and on Safari.
It's also easy to abuse [1]
[1]: https://blog.redteam.pl/2020/08/stealing-local-files-using-safari-web.html https://blog.redteam.pl/2020/08/stealing-local-files-using-s...
- kevincox 6y agoThis looks more like an implementation flaw than being easy to abuse. The API is still useful after it is patched.