Description
Sandboxed iframes on webpages could potentially allow downloads to the device, bypassing the expected sandbox restrictions declared on the parent page This vulnerability affects Firefox for iOS < 141.
Problem types
Sandboxed iframes could allow local downloads despite sandbox restrictions
Product status
Credits
Narendra Bhati
References
bugzilla.mozilla.org/show_bug.cgi?id=1912671
www.mozilla.org/security/advisories/mfsa2025-60/
