4 ms·
It's the browsers job to run untrusted code, this is why there are sandboxes and all kind of security-mechanism. This case is about a questionable intentional h
by PurpleRamen 3y ago
It's the browsers job to run untrusted code, this is why there are sandboxes and all kind of security-mechanism. This case is about a questionable intentional hole in the sandbox, which can be used for a social engineering-attack. Inject some code in a text-buffer, and hope that the user will execute it, and not see the malicious part. Not the biggest attack-vector, but an annoying one, which should be able to fixed easily.
- mlipmlopmlup 3y agoexcept that 1. it's not intentional 2. no social engineering is necessary to exploit it and 3. it's not so easy to (properly) fix it. you'll have to rewrite some shoddy '90-style c++ code with 0 test coverage code from scratch. and oh I forgot 4. there's no buffer, either.