That isn't exactly a Web-app-specific problem. If you have native software running malicious code with user-level access (whether it's in your browser or any ot

That isn't exactly a Web-app-specific problem. If you have native software running malicious code with user-level access (whether it's in your browser or any other random update from your package manager), you should consider the whole machine compromised.