Is there a way to block browser JavaScript from executing commands that retrieve sensitive information from my local machine, while still allowing JavaScript that is only used for rendering web pages?
jet @ jet @hackertalks.com Posts 93Comments 6,662Joined 2 yr. ago
jet @ jet @hackertalks.com
Posts
93
Comments
6,662
Joined
2 yr. ago
I love hearing rain outside, it means I don't have to go anywhere
your not wrong, but every browser exposes it via javascript. so if that is part of your threat model you can't use a local browser.