3 ms·

Neither can JS, as it is sandboxed. The interpretation and application of CSS directives is not Turing complete, but often enough to leak information from your

• csandreasen 12y ago
  > Neither can JS, as it is sandboxed. Not true. It's definitely possible to escape the sandbox. Some examples: https://github.com/rapid7/metasploit-framework/tree/master/modules/payloads/singles/firefox https://github.com/rapid7/metasploit-framework/tree/master/m... http://www.mozilla.org/security/announce/2013/mfsa2013-12.html http://www.mozilla.org/security/announce/2013/mfsa2013-12.ht... http://www.iss.net/security_center/reference/vuln/googlechrome-javascript-bo.htm http://www.iss.net/security_center/reference/vuln/googlechro... https://bugzilla.mozilla.org/show_bug.cgi?id=805121 https://bugzilla.mozilla.org/show_bug.cgi?id=805121 https://www.usenix.org/legacy/event/woot08/tech/full_papers/daniel/daniel.pdf https://www.usenix.org/legacy/event/woot08/tech/full_papers/...