Now, we're bringing that technology to all supported Firefox platforms (desktop and mobile), and isolating five different modules: Graphite, Hunspell, Ogg, Expat and Woff2. This technique, which uses WebAssembly to isolate potentially-buggy code, builds on the prototype we shipped last year to Mac and Linux users. The sandbox subsystem works by compiling a process in WebAssembly before re-converting it into native code, which restricts its access to system memory and stops it from jumping to unexpected parts of the program, thus limiting its potential for exploiting vulnerabilities. Mozilla has released Firefox 95, featuring a new version of its security sandboxing subsystem called RLBox, and additional performance and efficiency improvements for the macOS version of the web browser.Īccording to the release notes, RLBox is a new technology that hardens Firefox against potential security vulnerabilities in third-party libraries.
0 kommentar(er)
