PoCs Check

Guide
中文

Enable Camera Test Guide

Summary Description

Enable Camera is used to test Dapp silent access to the camera. When using the camera, the Dapp should request permission, and by default, the Dapp should not be granted camera access directly.

Vulnerability Identification

Click the "Enable Camera" button on the test page. If the camera is turned on and video information is displayed in the blank box on the page without requesting permission or alerting the user, the vulnerability is confirmed.

Solution

It is recommended to alert users about camera usage operations and to request user authorization before executing these actions.