Description
Focus was incorrectly allowing internal links to utilize the app scheme used for deeplinking, which could result in links potentially circumventing some URL safety checks This vulnerability affects Focus for iOS < 132.
Problem types
Don't allow web content to open firefox-focus URLs
Product status
Credits
James Lee
References
bugzilla.mozilla.org/show_bug.cgi?id=1863832
www.mozilla.org/security/advisories/mfsa2024-60/
