3 ms·
Counterpoint: if you allow your browser to run JavaScript, it’s already executing arbitrary regexes it finds on the Internet.
by daxelrod 7y ago
Counterpoint: if you allow your browser to run JavaScript, it’s already executing arbitrary regexes it finds on the Internet.
- closeparen 7y agoThe browser is, the passwords manager is on the other end of an IPC mechanism with a hopefully small and well-defined interface.
- daxelrod 7y agoMy point is that it is possible for your password manager to sandbox regex execution at least as well as your browser does. I totally agree with your concerns about scope creep increasing the attack surface.