This reminds me of Proxy Auto Configs (https://en.wikipedia.org/wiki/Proxy_auto-config https://en.wikipedia.org/wiki/Proxy_auto-config). PAC files are Proxy con

This reminds me of Proxy Auto Configs (https://en.wikipedia.org/wiki/Proxy_auto-config https://en.wikipedia.org/wiki/Proxy_auto-config). PAC files are Proxy configs that are programmed in JavaScript. To do this devices usually embed a JavaScript runtime in the operating system to parse proxy files. This introduces a lot more attack surface than a standard config file would and has resulted in remote code execution vulnerabilities in android and windows https://android.googlesource.com/platform/external/chromium-libpac/+/af8de44fa4f7c228d812e8db86d4d16585ed1050 https://android.googlesource.com/platform/external/chromium-... https://googleprojectzero.blogspot.com/2017/12/apacolypse-now-exploiting-windows-10-in_18.html https://googleprojectzero.blogspot.com/2017/12/apacolypse-no...