Brave Software · Report #176076
Javascript confirm() crashes Brave on PC
Informativestatus
mediumseverity
4upvotes
19 Oct 2016disclosed
Summary
Glad this kick-started my interest in penetration testing! Pretty interesting bug somewhere deep in the source code.
How it was found
Hello Brave, https://hackerone.com/smelt and I found a glitch for Brave on Windows.
Summary:
If you run the javascript code confirm(), Brave will crash. This is major for a glitch, because people may be visiting websites that have confirm messages and Brave will suddenly and unexpectedly crash for them.
Products affected:
Doesn't effect Mobile Tested and crashed Windows Brave browser
Steps To Reproduce:
- Open Brave
- Run the JS code confirm() somehow (Ex. go to my website I made that runs it: pentesting.x10host.com)
- Brave will crash
If you have questions or comments please reply here.
Thanks, kicker and smelt