Comment by jeroenhd

Things I'm missing from this FAQ:

- Is this a Webkit vulnerability or a Safari vulnerability?

- Does enabling Lockdown mode mitigate this vulnerability, seeing as mobile Safari doesn't expose these dev settings?

- What's the timeline on the disclosure to Apple?

Edit: they updated the page to answer the last question:

  When did you notify Apple?

  We disclosed our results to Apple on September 12, 2022 (408 days before public release).