📜 ⬆️ ⬇️

iOS CSS of death

image

A code was published on github that leads to force restart iOS (11/12 GM) devices when visiting an html page. It also causes Mac OS High Sierra / Mojave to crash when using Safari.


The code leading to force restart is an html-code with a large number of nested divs and a "crazy" background blur function:


... div { backdrop-filter: blur(10px); -webkit-backdrop-filter: blur(10px); width:10000px; height:10000px; } </style> </head> <body> <div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div> ... 

Also published PoC html-page that implements this bug (Safari users go at their own peril and risk).



There is an assumption that the bug crept in at a level lower than the webkit and may lead to more serious consequences. Also, the use of this bug can be applied in sociotechnical companies and stupid sweepstakes, so I advise you to be extremely suspicious of all links, especially since iOS all browsers, in fact, is a superstructure over Safari.


')

Source: https://habr.com/ru/post/423411/


All Articles