Polish security researcher Pawel Wylecial, co-founder of REDTEAM.PL, unveiled the flaw on Monday. He attributed the bug to Safari s implementation of the Web Share API, which is relatively new, allows users to share links from the browser via third-party applications, such as those distributed via mail and messaging apps. Apple said it would address the issue in the Spring 2021 update to Safari, which would be nearly a year after the issue was reported. The disclosure shows the ongoing tension between Apple and security researchers.
Source: https://threatpost.com/safari-bug-revealed-after-apple-takes-nearly-a-year-to-patch/158612/