Walleson Moura (@phor3nsic) · 2026-01-21
Triggering Authentication Dialogs Inside Sandboxed Iframes
An unexpected behavior in sandboxed iframes — triggering modal browser authentication dialogs without allow-popups, as long as allow-scripts is present.
browser-securityiframesandboxresearch
Read post →