CVE-2017-7089

This exploit leverages a logic issue in Safari 10's handling of the parent-tab URI scheme to bypass the Same-Origin Policy (SOP) and execute arbitrary JavaScript in the context of another domain, leading to universal cross-site scripting (UXSS). The PoC demonstrates injecting malicious content into a new tab opened via the parent-tab:// scheme.

This repository contains a proof-of-concept for CVE-2017-7089, a universal cross-site scripting (XSS) vulnerability in Safari 10. The exploit leverages a logic issue in the handling of the parent-tab to bypass the Same-Origin Policy (SOP) and execute arbitrary JavaScript in the context of another domain.

The repository contains only a README.md file with minimal information about CVE-2017-7089, lacking any exploit code or technical details.