swift-webview-config-base-url
swift-webview-config-base-url
UIWebView instances were observed where the baseURL is misconfigured as nil, which allows for origin abuse within the webview. In order to remove the effective origin, the application should explicitly set the baseURL to
Likelihood: LOW
Confidence: HIGH
CWE:
- CWE-272: Least Privilege Violation
about:blank
or similar.Likelihood: LOW
Confidence: HIGH
CWE:
- CWE-272: Least Privilege Violation