This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in Safari 13.0.1, iOS 13. Maliciously crafted web content may violate iframe sandboxing policy.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8771
Reference (s):
- https://support.apple.com/en-us/HT210605
- URL: https://support.apple.com/en-us/HT210605
- https://support.apple.com/en-us/HT210606
- URL: https://support.apple.com/en-us/HT210606