Author Topic: Is this sandbox now secure?  (Read 1492 times)

0 Members and 1 Guest are viewing this topic.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33913
  • malware fighter
Is this sandbox now secure?
« on: January 23, 2012, 06:55:26 PM »
See: -http://www.businessinfo.co.uk/labs/jsreg/jsreg.html

A former sandbox was insecure because the demo had been compromised by sirdarckcat through XSS -http://www.businessinfo.co.uk/labs/sandbox/entry.php (well NoScript add-on protects against this in fx as does NotScripts in combination with Better Pop up Blocker extensions in Google Chrome),

polonus

P.S. On checking some JScode all works well, error log for instance gave: Description:Syntax error
Msg:Unexpected token (
 
D
« Last Edit: January 23, 2012, 06:58:41 PM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!