Arc knew that sharing custom JavaScript could be risky, so they never officially allowed users to share Boosts that included custom JavaScript. However, this exploit found a loophole in that system.

A security researcher revealed a “catastrophic” vulnerability in the Arc browser that would have allowed attackers to insert arbitrary code into other users’ browser sessions with little ...

ARLINGTON, VA, and GENEVA, Nov. 29, 2023 (GLOBE NEWSWIRE) -- Airlines Reporting Corporation (ARC) and the International Air Transport Association (IATA) have extended their Direct Data Solutions ...