←back to thread

Escaping the Chrome Sandbox Through DevTools

(ading.dev)
406 points vk6 | 4 comments | 17 Oct 24 05:55 UTC | HN request time: 0s | source
Show context
bossyTeacher ◴[17 Oct 24 11:33 UTC] No.41868611[source]▶
Is it bad for Chrome to have vulnerabilities? I think long-term is really good. People need to get away from the browser monopoly (because it really is only Chrome here holding the power) and support the ecosystem
replies(1): >>41869466 #
1. diggan ◴[17 Oct 24 13:26 UTC] No.41869466[source]▶
> Is it bad for Chrome to have vulnerabilities?

Yes, obviously it is. Is it bad for others/the public? Probably, but not as bad as it is for Chrome.

> because it really is only Chrome here holding the power

I'm not sure this is true. Apple pretty much forces usage of their browser engine on iOS, and heavily try to get people to use Safari on macOS. Windows push Edge pretty hard on their OS, and their browser engine is pretty much intertwined to the OS so you can't not use it. Both of them say they let you change the default, but various links in the OS would still open Edge/Safari even if you have the default browser changed. Not sure if that's on purpose or not.

replies(1): >>41872769 #
2. dylan604 ◴[17 Oct 24 19:06 UTC] No.41872769[source]▶
> and heavily try to get people to use Safari on macOS

how so? on any new macOS install, I use Safari to download Firefox. After that, I never think about Safari until I'm trying to use its DevTools to look at iDevices. I never get a nag screen about Safari. I have never had default browser changed after any updates.

so where exactly is this heavy handed attempt at forcing Safari down anyone's throat?

replies(1): >>41877914 #
3. diggan ◴[18 Oct 24 10:15 UTC] No.41877914[source]▶
I'm not on a macOS machine right now, so can't show you any specific examples, but scattered links/actions across Apple applications still open Safari from time to time (I think Xcode was especially gnarly for a long time), as it seems at one point Apple hardwired the links/actions to open Safari rather than the user set browser. Search for `site:discussions.apple.com wrong browser` in your favorite search engine and you'll get some actual examples.
replies(1): >>41878687 #
4. Aaron2222 ◴[18 Oct 24 12:16 UTC] No.41878687{3}[source]▶
Back when I used to run Chrome, I noticed one case that would do this (it was buried in Spotlight), but it didn't seem intentional (especially because web search results in Spotlight always respected the default browser setting, and showed the correct browser icon as well). I use Safari now though, so I won't be finding any more cases like that anytime soon.