sabreW4K3 ( sabreW4K3@lazysoci.al ) to Privacy@lemmy.dbzer0.comEnglish · 1 year agoAdult sites are stashing exploit code inside racy .svg filesarstechnica.comexternal-linkmessage-square13linkfedilinkarrow-up139cross-posted to: privacy@programming.devpulse_of_truth@infosec.pub
arrow-up139external-linkAdult sites are stashing exploit code inside racy .svg filesarstechnica.comsabreW4K3 ( sabreW4K3@lazysoci.al ) to Privacy@lemmy.dbzer0.comEnglish · 1 year agomessage-square13linkfedilinkcross-posted to: privacy@programming.devpulse_of_truth@infosec.pub
minus-squareReversalHatchery ( ReversalHatchery@beehaw.org ) linkfedilinkarrow-up3·1 year agothat does not explain how does it happen when the svg appears on a page in firefox. firefox won’t try to open all embedded assets with the default file handler in the OS, it will directly use its built in tools to handle it.
that does not explain how does it happen when the svg appears on a page in firefox. firefox won’t try to open all embedded assets with the default file handler in the OS, it will directly use its built in tools to handle it.