Comment Comment by vlovich123 You’d think so from reading [1]. [2] though paints a very different picture.> The attacker can submit a maliciously crafted database file to the application that the application will then open and query.I think it’s not impossible to secure SQLite better but it takes some work (like how Chrome sandboxes it in a separate process).[1] https://www.sqlite.org/security.html [2] https://www.sqlite.org/cves.html parent vlovich123 5 years ago
> The attacker can submit a maliciously crafted database file to the application that the application will then open and query.
I think it’s not impossible to secure SQLite better but it takes some work (like how Chrome sandboxes it in a separate process).
[1] https://www.sqlite.org/security.html [2] https://www.sqlite.org/cves.html