4 ms·
> The referenced `patch.diff` is basically for simulating a compromised renderer. The patch.diff part is hard to understand. Surely if you have a compromised
by kristianp 1y ago
> The referenced `patch.diff` is basically for simulating a compromised renderer.
The patch.diff part is hard to understand. Surely if you have a compromised renderer, you have effectively full access to the machine already?
- Retr0id 1y agoNo, because of the sandbox.
- saagarjha 1y agoModern browsers have multiple processes with different sandbox policies. The renderer process handles untrusted web content and is heavily sandboxed. The browser process does all the other stuff required to interact with your computer (and is generally much less isolated).
- pests 1y agoThe main browser process treats the renderer as untrustworthy/potentially hostile. A compromised renderer is in the threat model.