Vulnerability in Adblock Plus allows code execution when using questionable filters
A vulnerability has been found in the Adblock Plus ad blocker that allows the execution of JavaScript code in the context of websites when using unverified filters created by malicious actors (e.g., when connecting third-party rule sets or through rule substitution during a MITM attack). Authors of filter lists can execute their code in the context of user-opened websites by adding rules with the 'rewrite' operator.
