[iOS] URI Obfuscation in iOS application

How it was found

Summary:

you must trick someone into viewing a website they did not want to view by tempting them with something they are familiar with.

Products affected:

Brave iOS application

https://itunes.apple.com/in/app/brave-web-browser/id1052879175?mt=8

this application is vulnerable to the URI obfuscation

Steps To Reproduce:

• open browser into ios device
• type [email protected]
• it will open fb.com without any pop ups

Supporting Material/References:

*PoC is under attached

https://www.youtube.com/watch?v=51RPPwSEXvU