Исходное сообщение
"Возможность выполнения JavaScript в обход ограничений NoScri..." Отправлено vn971, 02-Июл-15 19:20
По мнению разработчиков NoScript, гораздо более полезная, т.к. шрифты очень стрёмная штука в лисе. https://hackademix.net/2010/03/24/why-noscript-blocks-web-fonts/ >     It really worries me that the FreeType font library is now being made to accept untrusted content from the web. >    The library probably wasn't written under the assumption that it would be fed much more than local fonts from trusted vendors who are already installing arbitrary executable on a computer, and it's already had a handful of vulnerabilities found in it shortly after it first saw use in Firefox. >    It is a very large library that actually includes a virtual machine that has been rewritten from pascal to single-threaded non-reentrant C to reentrant C... The code is extremely hairy and hard to review, especially for the VM. >    The reason I don't want to do this blocking in Torbutton is because Torbutton is only about protecting users from privacy risks, not general security risks. Users who want enhanced security are encouraged to use your extension and others on our FAQ page.

Ваше сообщение
Имя*:
EMail:	Для отправки ответов на email укажите знак ! перед адресом, например, !user@host.ru (!! - не показывать email). Более тонкая настройка отправки ответов производится в профиле зарегистрированного участника форума.
Заголовок*:
Сообщение*:
	Введите код, изображенный на картинке: