Skip to main content
Webviews were observed that explictly allow JavaScript in an WKWebview to open windows automatically. Consider disabling this functionality if not required, following the principle of least privelege.
Likelihood: LOW
Confidence: HIGH
CWE:
- CWE-272: Least Privilege Violation
I