3 ms·
If a sandbox includes the ability to load a link via a browser via standard event handler, how the hell is that an escape
by NikolaeVarius 6y ago
If a sandbox includes the ability to load a link via a browser via standard event handler, how the hell is that an escape
- dnautics 6y agoit's an escape because you can load an arbitrary script into the command, and if the sandbox crafter didn't think to lock down `import antigravity` then you can escape the sandbox.