 |
Post ApxWlPjWOOBxUUerw0 by [email protected] |
 |
More posts by [email protected] |
|
Post #ApxM9D1aCBe5WuFYsS by [email protected] |
|
0 likes, 0 repeats |
|
|
|
environmental storytelling |
|
|
|
Post #ApxOSncaYMewRY1oSu by [email protected] |
|
0 likes, 0 repeats |
|
|
|
@whitequark loading modules dynamically from an https link sounds like a hell o… |
|
|
|
Post #ApxOSnl62jSsrw0bj6 by [email protected] |
|
0 likes, 0 repeats |
|
|
|
@saphire it actually runs them in a very constrained environment just below |
|
|
|
Post #ApxOXdswBDzXh7z6bA by [email protected] |
|
0 likes, 0 repeats |
|
|
|
enjoy ;w; https://github.com/YoWASP/vscode/commit/0e68692e2b0f8a4d547c8bb4802ab… |
|
|
|
Post #ApxOatJTH9eAPcwdMW by [email protected] |
|
0 likes, 0 repeats |
|
|
|
@whitequark i can understand the rest of the crimes but "cannot dynamicall… |
|
|
|
Post #ApxOatTkevs0vVkqO0 by [email protected] |
|
0 likes, 0 repeats |
|
|
|
@lnl wdym? |
|
|
|
Post #ApxOgmJQDXU4RAjFSa by [email protected] |
|
0 likes, 0 repeats |
|
|
|
if Node supported Web Workers (as it really should) none of this would be neede… |
|
|
|
Post #ApxPKaFAVWWYafihTU by [email protected] |
|
0 likes, 0 repeats |
|
|
|
@whitequark why would you ever want to import modules from an external server? |
|
|
|
Post #ApxPKaO1yZc529rmHw by [email protected] |
|
0 likes, 0 repeats |
|
|
|
@lnl https://github.com/YoWASP/vscode |
|
|
|
Post #ApxPkDXXXeNLhnXJDc by [email protected] |
|
0 likes, 0 repeats |
|
|
|
@whitequark I suppose...Still feels kinda icky |
|
|
|
Post #ApxPkDg321BI8BW6To by [email protected] |
|
0 likes, 0 repeats |
|
|
|
@saphire correction: i found a sandbox escape |
|
|
|
Post #ApxPywYUyKdBNA0Sy8 by [email protected] |
|
0 likes, 0 repeats |
|
|
|
nevermind, this does it:new Function('console.log(process.env)')()i'… |
|
|
|
Post #ApxQFJpGDm8OB4egVs by [email protected] |
|
0 likes, 0 repeats |
|
|
|
@lnl tl;dr this is perfectly fine in the browser security model (for which this… |
|
|
|
Post #ApxQpV6VlZgVa6ydJA by [email protected] |
|
0 likes, 0 repeats |
|
|
|
(exhaustedly) gods, i hate this. this isn't _technically_ a vulnerability b… |
|
|
|
Post #ApxQyDOwxBIBHfkz1E by [email protected] |
|
0 likes, 0 repeats |
|
|
|
@whitequark I wasn't expecting to see a colleague to C++'s std::launder… |
|
|
|
Post #ApxQyzDx9N15bSysXg by [email protected] |
|
0 likes, 0 repeats |
|
|
|
why did i decide to look at nodejs before going to bedi will lose sleep over it… |
|
|
|
Post #ApxRpwugTKtlmhDrRQ by [email protected] |
|
0 likes, 0 repeats |
|
|
|
_normally_, i would have fixed this by compiling a JavaScript interpreter to We… |
|
|
|
Post #ApxRscnfhzvKH1DbYe by [email protected] |
|
0 likes, 0 repeats |
|
|
|
@whitequark Worker Threads with a data url wouldn't work? https://nodejs.or… |
|
|
|
Post #ApxS56eCYyFIJmjyFs by [email protected] |
|
0 likes, 0 repeats |
|
|
|
@phated that's what the sandbox escape is from. even if you restrict global… |
|
|
|
Post #ApxSSMmuie1f2NuI2C by [email protected] |
|
0 likes, 0 repeats |
|
|
|
@whitequark ah, okay. Alternatively, if this is in vscode, they might have some… |
|
|
|
Post #ApxTKQuxa4A5U1S2wy by [email protected] |
|
0 likes, 0 repeats |
|
|
|
@whitequark >grabs pencil and notebook of catchphrases< "Thus, crime… |
|
|
|
Post #ApxTjtustvJcf2YmYK by [email protected] |
|
0 likes, 0 repeats |
|
|
|
@phated this repository implements basically the same thing as my extension, ex… |
|
|
|
Post #ApxU0qqdYxP64DejLc by [email protected] |
|
0 likes, 0 repeats |
|
|
|
@whitequark yeah, I thought there was overlap. I was using vscode-wasm to get t… |
|
|
|
Post #ApxU6d0bvg6Csp4kb2 by [email protected] |
|
0 likes, 0 repeats |
|
|
|
@phated > Worker scripts also do not support importing source code using imp… |
|
|
|
Post #ApxWPW9npOJZ2kVgMS by [email protected] |
|
0 likes, 1 repeats |
|
|
|
@whitequark |
|
|
|
Post #ApxWlPjWOOBxUUerw0 by [email protected] |
|
0 likes, 0 repeats |
|
|
|
@whitequark I mean it does make sense, I just don't like magic invisible so… |
|
|
|
Post #ApxWlPsjq7Z3x4yEIi by [email protected] |
|
0 likes, 0 repeats |
|
|
|
@lnl correct |
|
|
|
Post #ApxYsdkur5ZmursrfU by [email protected] |
|
0 likes, 0 repeats |
|
|
|
@whitequark who's to stop you? |
|
|
|
Post #ApxvqmyLulr9rsFro8 by [email protected] |
|
0 likes, 0 repeats |
|
|
|
@whitequark i do love me some JS crimes |
|
|
|
Post #Apy3V55sesPPKhw67M by [email protected] |
|
0 likes, 0 repeats |
|
|
|
@whitequark how's the shed going |
|
|
|
Post #Apy7qioCatoKP8F2bQ by [email protected] |
|
0 likes, 0 repeats |
|
|
|
@entronid :< |
|
|
|
Post #ApydZ38fSw9smHQo88 by [email protected] |
|
0 likes, 0 repeats |
|
|
|
i found an issue thread where the lack of web workers in node is discussed but … |
