Security Review

• https://github.com/brave/security/issues/1302

Summary of Changes

• Relax SSL validation.
• Use Chromium validation over Apple's validation.
• If Chromium returns a value indicating that the system should handle it, then we use Apple's validation.
• Disable Apple's X509 validation and only validate it for SSL to match other browsers (including Safari).

This pull request fixes #5543

Submitter Checklist:

• Unit Tests are updated to cover new or changed functionality
• User-facing strings use NSLocalizableString()
• New or updated UI has been tested across:
  • Light & dark mode
  • Different size classes (iPhone, landscape, iPad)
  • Different dynamic type sizes

Test Plan:

• Visit https://office.harrisisi.com/index.jsp
• It should show "SECURE" in the URL bar, if Safari and all other browsers show it is secure.

Reviewer Checklist:

• Issues include necessary QA labels:
  • QA/(Yes|No)
  • bug / enhancement
• Necessary security reviews have taken place.
• Adequate unit test coverage exists to prevent regressions.
• Adequate test plan exists for QA to validate (if applicable).
• Issue and pull request is assigned to a milestone (should happen at merge time).