3 ms·
> Removing support for dead formats is generally a very good idea, particularly in a web browser, because it reduces the attack surface; This seems unfortunate
by photonbeam 3y ago
> Removing support for dead formats is generally a very good idea, particularly in a web browser, because it reduces the attack surface;
This seems unfortunate, surely they could sufficiently sandbox the decoder
- ReactiveJelly 3y agoThey do, but it's defense in depth
- account42 3y agoYet websites can run arbitrary JS?