News for hackers. Stuff that matters.

A comment on Emacs xwidget-webkit enhancement suite. Parent comment

Re:Emacs xwidget-webkit enhancement suite by bitexploder on Monday August 24, 2020 @09:45AM (#24260569)
It’s not even about being targeted specifically. It’s about the complete loss of sandbox and safety guarantees. There is a lot of LHF here.
[ Parent | on HN ]
Re:Emacs xwidget-webkit enhancement suite by ubercow13 on Monday August 24, 2020 @10:43AM (#24261142)
Why would the sandbox be lost? Can't webkit's normal sandbox still operate here?

This feature uses webkit2gtk [1] which is the base for multiple full web browsers [2] and supports webkit2's normal web process isolation [3]. Is the sandboxing disabled for some reason?

[1] https://emacs.stackexchange.com/questions/48670/the-status-o...

[2] https://wiki.archlinux.org/index.php/List_of_applications#We...

[3] https://webkitgtk.org/ & https://blogs.gnome.org/mcatanzaro/2016/02/01/on-webkit-secu...

[ Parent | on HN ]
Re:Emacs xwidget-webkit enhancement suite by throwanem on Monday August 24, 2020 @09:53AM (#24260634)
LHF?
[ Parent | on HN ]
Re:Emacs xwidget-webkit enhancement suite by ahendriksen on Monday August 24, 2020 @10:10AM (#24260804)
low-hanging fruit presumably.
[ Parent | on HN ]