Renwa

Spoofing issue in the Address Bar component

Firefox Mobile iOS Address Bar Spoof Using Server-Side Redirect to non-http Scheme

Firefox Mobile iOS Full Address Bar Spoof Using Server-Side Redirect to internal error page

Firefox Mobile iOS Full Address Bar Spoof Using Open in New Tab and Javascript URI

Content-Disposition headers incorrectly ignored for some MIME types

Opening links via the contextual menu in Focus for iOS would not update the toolbar UI correctly, allowing attackers to spoof websites

Focus incorrectly ignores Content-Disposition headers for some MIME types

Spoofing issue in the Address Bar component

Spoofed web content presented under trusted domains using scripted navigation on Firefox iOS