Re:Everything Old Is New Again: Binary Security of WebAssemb...
by cbsmith on Monday May 03, 2021 @11:59AM
(#27026733)
> Java applets were "unsafe by design" in that they allowed to escape the sandbox (even as a feature via calling out into native DLLs).
The design of the Java applet security model did not include being able to escape the sandbox. That was something Microsoft did that deliberately broke the security model. The closest thing Java applets had to "escape the sandbox" was popping up a new window, and even that involved presenting the user with a warning that the window belonged to the applet.
The design of the Java applet security model did not include being able to escape the sandbox. That was something Microsoft did that deliberately broke the security model. The closest thing Java applets had to "escape the sandbox" was popping up a new window, and even that involved presenting the user with a warning that the window belonged to the applet.