News Score: Score the News, Sort the News, Rewrite the Headlines

GitHub - humodz/node-wasi-preopens-escape: Proof of concept showcasing how a WASM program can access files outside node:wasi's preopens dir.

This repository showcases how to open files outside the "filesystem sandbox" in node:wasi. The WASI class has a preopens parameter that describes what files the WASM program has access to. Usually, accessing files outside of it results in a "file not found" error, but it's possible to circumvent that if a symlink replaces the file at a very precise moment. This relies on an outside process to happen and isn't really a problem in practice since most people aren't trying to run malicious code with...

Read more at github.com

© News Score  score the news, sort the news, rewrite the headlines