turmio

4 ms·

1. 1.▲
   by turmio 6y ago

   Thats true. Without sandbox this would have been much worse. Sandboxes are good speed bumps.
2. 2.▲
   by turmio 6y ago

   Thanks!
3. 3.▲
   by turmio 6y ago

   Sorry about that. But thats the term what is used by Apple to these type of bugs: https://developer.apple.com/security-bounty/ ( Zero-click unauthorized access to sensitive data )
4. 4.▲
   by turmio 6y ago

   Thats what I thought first too (I am the author). And your guess for the reason is right. AppleScripts need to be stored in ~/Library/Application Scripts/com.apple.mail directory which is outside of the sandbox.