A relatively obscure browser interaction — dragging and dropping content — turned into a tangible security risk when Mozilla disclosed CVE-2023-37203: an insufficient validation flaw in the Drag and Drop API that, when combined with social engineering, could trick users into creating shortcuts...