6 ms·
Do what Chrome has done and continually improve plugin security. Plugins should ask for permissions. Would require an overhaul of WP though.
by quickthrower2 3y ago
Do what Chrome has done and continually improve plugin security. Plugins should ask for permissions. Would require an overhaul of WP though.
- berkes 3y agoThat, and/or a sandbox model where plugins cannot escape a sandbox. And/Or a setup where a plugin's runtime is isolated from main WP and other plugins and it can only communicate with WP over a tiny and very much hardened API. so many possibilities. This problem has been solved mostly. Just not for PHP (that I know) and certainly not for WP.