Yakov Manshin demonstrates WebKit native shell bridge attack on iOS

The author demonstrates how a poorly configured native bridge in a WebKit native shell on iOS can enable arbitrary remote code execution, denial-of-service attacks, and data exfiltration. To mitigate these risks, the author recommends combining App Transport Security with App-Bound Domains and strict route segregation using a navigation delegate to isolate untrusted external websites. Open article →