3 ms·
> We used to have real extension frameworks Those "real extension frameworks" had even more permissions, often to run arbitrary local code as the user.
by JoshTriplett 6y ago
> We used to have real extension frameworks
Those "real extension frameworks" had even more permissions, often to run arbitrary local code as the user.
- craig131 6y agoBrowser extensions can still run local code as the user. Example of a Chrome extension loading an arbitrary .dll: https://twitter.com/evilsocket/status/1339566046265696256 https://twitter.com/evilsocket/status/1339566046265696256