for a browser that hasn't been hardened much This claim is oft repeated, but the only reasons people seem to say it is that multiprocess + sandbox is not in re

for a browser that hasn't been hardened much This claim is oft repeated, but the only reasons people seem to say it is that multiprocess + sandbox is not in release Firefox (it's in Nightly/Aurora/Beta). That doesn't necessarily make it true. There's been some blogs since about how the JS <-> C++ sandbox has actually been significantly strengthened, but people just ignore truths that don't fit their preconceptions. IE/Edge and Chrome also have sandboxes, and they still get cracked every Pwn2Own.