Failure of sandboxing
Failure of sandboxing
Posted Apr 18, 2025 16:45 UTC (Fri) by vonbrand (guest, #4458)In reply to: Failure of sandboxing by epa
Parent article: Catanzaro: Dangerous arbitrary file read vulnerability in Yelp
And all users are fine with checking what "123_PGR_xvg.js" does. Heck, I would understand around half of the code, and would not appreciate to have to interrupt my work (already interrupted looking for help, or whatever) to launch an audit on some recondite snippet of code of no interest to me.
The LWN site is currently under high scraper load, so comment display has been suppressed for anonymous users. If you are a human, you may read the comments by clicking the button below:
Note: you can avoid this step in the future by logging into your LWN account.