Focus for iOS would not respect a Content-Disposition header of type Attachment and would incorrectly display the content inline, potentially allowing for XSS attacks This vulnerability affects Focus for iOS < 142.
| Software | From | Fixed in |
|---|---|---|
| mozilla / firefox_focus | - | 142.0 |