News for hackers. Stuff that matters.

A comment on From Markdown to remote code execution in Atom. Parent comment

Re:From Markdown to remote code execution in Atom by sigzero on Thursday November 23, 2017 @12:55PM (#15766698)
"As long as you don't load untrusted code or content..."

Because end users are soooo good at that?

[ Parent | on HN ]
Re:From Markdown to remote code execution in Atom by AgentME on Thursday November 23, 2017 @06:18PM (#15768477)
They're referring to the application developer.

If the developer uses Electron only to open the application's own html files and doesn't render user-provided HTML anywhere, then there won't be any XSS vulnerabilities.

[ Parent | on HN ]