Hacker News new | past | comments | ask | show | jobs | submit login

Yes, but that IPC channel to the browser can only do anything useful if you find another exploit in the browser.

And the New Tab Page doesn't even have permissions to do much via that IPC channel, because its origin isn't equal to anything interesting.




Consider applying for YC's Spring batch! Applications are open till Feb 11.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: