Re:Firefox Picture-in-Picture
by michaelmrose on Friday July 10, 2020 @05:08PM
(#23796474)
Thanks. A question occurs to me shouldn't such sanitation be its own step in order to be generalized to anything that the user wants to run?
For the record we don't recommend piping straight to `!` as a malicious (and fairly Tridactyl specific) site could use it to execute whatever it wanted. We have a default bind for open in mpv that sanitises things - https://github.com/tridactyl/tridactyl/blob/dc8919e7e65d5dfa... using https://github.com/tridactyl/tridactyl/blob/dc8919e7e65d5dfa...