3 ms·
It seems like it (didn't see that there was a JS version of the exploit until after I posted), although they can only read from the address space of the process
by workthrowaway27 9y ago
It seems like it (didn't see that there was a JS version of the exploit until after I posted), although they can only read from the address space of the process the JS code is running in. I think tabs get individual processes (in Chrome at least), not sure about Firefox or other browsers, so I'm not sure how bad this is in practice.