3 ms·

This article doesn't describe any vulnerabilities in the browser, is that correct? Mostly processing XML, Python and C. The conclusion is > Implement sandboxin

This article doesn't describe any vulnerabilities in the browser, is that correct? Mostly processing XML, Python and C. The conclusion is > Implement sandboxing for anything that processes fonts I don't believe the author is referring "your web browser"

kragen 3y ago
commonly the web browser passes the font data it downloads to the operating system for rendering, and there have definitely been exploitable holes in downloadable font handling in the past, in large part because the font rendering engines were not written with malicious data in mind (because you were buying your fonts from bitstream or apple or mergenthaler or whatever)