4 ms·
No, SQLite was not safe to be used with arbitrary queries. There were multiple memory vulnerabilities that allowed escape of the browser sandbox. https://www.s
by devwastaken 5y ago
No, SQLite was not safe to be used with arbitrary queries. There were multiple memory vulnerabilities that allowed escape of the browser sandbox.
https://www.sqlite.org/cves.html https://www.sqlite.org/cves.html
- infogulch 5y agoThis article is about how to defend against potential websql vulns. https://www.sqlite.org/security.html https://www.sqlite.org/security.html
- nightpool 5y agoThis article only contains mostly information on adding more limits to avoid DoS—nothing there would harden WebSQL against SQLite vulnerabilities except for SQLITE_DBCONFIG_DEFENSIVE, which was only added in response to the zero-day bugs that were found in Chrome after implementing SQLite.
- SilverRed 5y agoWould this not be solvable by just making it all arbitary WASM code? As long as the simple WASM sandbox is secure, it doesn't matter how buggy your internal SQLite implementation is.