4 ms·
Like I asked the other person in this thread, what's wrong with that answer? Not only does it correctly identify the attack vector of this CVE, but I think his
by naberhausj 2y ago
Like I asked the other person in this thread, what's wrong with that answer?
Not only does it correctly identify the attack vector of this CVE, but I think his advice on how to mitigate it is sound. Is there something I'm missing? The only flaw I see is that it doesn't consider the implications of using PDF.js in Electron.