Comment

Comment by andrybak

According to the original reporter, the bug is still exploitable and that's why the issue on the bug tracker got hidden again.

> OH NO I JUST REALIZED THIS IS NOT ACTUALLY PROPERLY FIXED AND STILL WORKS

> even worse, edge no longer even makes the download menu pop up, so it's completely silent js rce that keeps running even after you close the browser !!

> all from just visiting a single website once !!

> issue set to private again, hopefully it'll get fixed properly this time :p

parent andrybak 5 months ago

No comments yet

Be the first to share your thoughts.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton