security.nuyts.tech
CVE-2022-30334 – NuytsTech Security
Brave before 1.34, when a Private Window with Tor Connectivity is used, leaks .onion URLs in Referer and Origin headers. NOTE: although this was fixed by Brave,