News for hackers. Stuff that matters.

A comment on Arbitrary code execution through unsanitized browser UI. Parent comment

Re:Arbitrary code execution through unsanitized browser UI by pcwalton on Wednesday January 31, 2018 @10:13PM (#16279416)
Note that Site Isolation isn't on by default, and I still don't know what they're going to do about sites that contain hundreds of cross-domain iframes.
[ Parent | on HN ]
Re:Arbitrary code execution through unsanitized browser UI by quotheth on Thursday February 01, 2018 @12:11PM (#16283565)
My point with site isolation was more their continued effort to push interesting, compelling security improvements. Currently, from a corp perspective, enabling site isolation for internal high security websites (SSO pages etc) is possible with GPO and a big win imo.

Please don't take it the wrong way, I think Firefox is awesome too :)

[ Parent | on HN ]
Re:Arbitrary code execution through unsanitized browser UI by pjmlp on Thursday February 01, 2018 @12:43AM (#16279845)
If that helps killing ads and analytics, I don't care 1 second.
[ Parent | on HN ]