EIP-2026-103858

This exploit demonstrates a URI-spoofing vulnerability in Apple Safari by using a long sequence of spaces in the URL to obscure the true domain, potentially misleading users into trusting a malicious site. The PoC opens a new window with a spoofed URL and injects arbitrary content to simulate a fake page.