Subject: Re: bug#45198: 28.0.50; Sandbox mode

From: Philipp Stephani <[email-masked]>
Date: Sun, 13 Dec 2020 18:07:33 +0100

Am So., 13. Dez. 2020 um 05:26 Uhr schrieb Stefan Monnier
<[email-masked]>:
> I'm still worried that there remain wide open security holes, tho.

Yes, this is still essentially arbitrary RCE.
Running untrusted code needs defence in depth.