Re:Strengthening the Microsoft Edge Sandbox
by satysin on Sunday March 26, 2017 @09:08AM
(#13960580)
Edge is closed source. You have no way of verifying the build of Chakra used is the same as the open source version. Well it might be possible to reproduce a build of Chakra to do a binary comparison but i am not aware of anyone doing it.
[ Parent
| on HN ]
Re:Strengthening the Microsoft Edge Sandbox
by repples on Sunday March 26, 2017 @02:21PM
(#13962211)
There's nothing stopping you from compiling https://github.com/Microsoft/ChakraCore and checking if Chakra.dll matches that which is distributed with Edge.
Re:Strengthening the Microsoft Edge Sandbox
by satysin on Sunday March 26, 2017 @03:03PM
(#13962469)
AFICT you cannot build a like-for-like chakra.dll from ChakraCore due to https://github.com/Microsoft/ChakraCore#using-chakracore
The chakra.dll that comes as part of Windows/Edge includes the additional parts not included with ChakraCore (at least that is how it reads to me).