2 ms·

>since you can just inject keystrokes and thus trivially take over the system... From javascript in a browser? That would indeed be a serious issue. How would

• makomk 9y ago
  The whole point of this is to stop attackers who've managed to break out of the JavaScript sandbox. It's an extra layer of protection. If you're going to assume that an attacker is restricted to what JavaScript is meant to be able to do then the whole exercise is pretty much pointless; this is also a bad assumption.