Re:Xterm.js
by rbanffy on Friday October 08, 2021 @08:52AM
(#28798642)
When was the last case when a malicious website or script could capture content or keystrokes directed at another tab? Really curious, because it seems an obvious attack vector.
[ Parent
| on HN ]
2018 at the earliest:
https://en.wikipedia.org/wiki/Spectre_(security_vulnerabilit...
It's not a browser vulnerability per se, but it's still mitigated by having a separate address space.
Re:Xterm.js
by colejohnson66 on Friday October 08, 2021 @09:09AM
(#28798827)
At least in the last decade, I don’t think that’s even possible on the “big” browsers. There were vulnerabilities involving <iframe>s, but I don’t know enough about those.