Description
Focus for iOS would not respect a Content-Disposition header of type Attachment and would incorrectly display the content inline, potentially allowing for XSS attacks This vulnerability affects Focus for iOS < 142.
Problem types
Focus incorrectly ignores Content-Disposition headers for some MIME types
Product status
Credits
Renwa
References
bugzilla.mozilla.org/show_bug.cgi?id=1976296
www.mozilla.org/security/advisories/mfsa2025-69/
