zlacker

Untrusted code running in a well-defined and maintained sandbox.

>>EvanAn+(OP)
Yes and....

>>EvanAn+(OP)
Still stuff manages to escape constantly

You can find exploits on gh for older chromium versions easily

>>hardwa+3O1
Even so it's disingenuous to compare running native code in an OS w/o a capabilities model to running Javascript in a browser.

>>pauldd+5i1
Visiting a website and running Javascript vs. running a native application aren't equivalent. Browser sandbox exploits are "a thing" but that doesn't make the situations the same.

>>EvanAn+uJ2
Yes and WASM can be sandboxed just as easily as JavaScript.

There is nothing "magical" about web browsers in that regard.

>>pauldd+j33
I don’t follow where you’re going.

I didn’t say there was anything “magical” about browsers. They have a sandbox for JavaScript, by default. Windows doesn’t have a sandbox for native apps, by default.

A parent poster seemed to be making a statement of equivalency between running a native application in Windows and running JavaScript in a browser. I don’t think they’re equivalent.

That’s what I’m saying.

>>EvanAn+kb3
We are literally talking about an environment for running Win32 apps in a sandbox