4 ms·Using Hermes’s Quicksort to run Doom: A tale of JavaScript exploitation4 points by jtuple 4y ago