4 ms·
It means that a bug in the compiler/optimizer could allow WebAssembly code to escape its sandbox. This is a real issue, but o some extent this extra attack sur
by roca 9y ago
It means that a bug in the compiler/optimizer could allow WebAssembly code to escape its sandbox.
This is a real issue, but o some extent this extra attack surface is mitigated because vendors are reusing JS compiler backends that are already part of the TCB.