Pre-trust Execution Window

Description

Named vulnerability class where extension code runs before the user's trust dialog. Defense-in-depth layers can be bypassed when untrusted content executes prior to permission enforcement, implicating several reported CVEs.

Key claims

Relations

Sources

src-20260423-0cff68d3291b