3 ms·
https://www.youtube.com/watch?v=glL__xjviro&t=450s https://www.youtube.com/watch?v=glL__xjviro&t=450s Instead of popping up an alert, you could have requested
by cygx 3y ago
https://www.youtube.com/watch?v=glL__xjviro&t=450s https://www.youtube.com/watch?v=glL__xjviro&t=450s
Instead of popping up an alert, you could have requested the deletion of all files in the cloud storage.
- flohofwoe 3y agoThanks for the link, very interesting! But TBF: the 'host program' has to be written in a very specific way to allow that rogue Javascript execution, it's very similar to allowing an SQL injection to happen. I also wonder why stack canaries wouldn't work on WASM, since the compiler creates stack frames on the data-only stack just the same (but maybe Clang's `-fstack-protector` doesn't work for some reason in WASM, I'll actually need to check that).