The JavaScript implementation in WebKit allows remote attackers to send selected keystrokes to a form field in a hidden frame, instead of the intended form field in a visible frame, via certain calls to the focus method.
| Software | From | Fixed in |
|---|---|---|
| apple / webkit | - | - |