Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I recently discovered Vimperator, which is just awesome. However, it concerns me that I can execute shell commands from the browser.. is this exploitable? I'd really hate to get "sudo rm -r /*"'d. I don't know too much about web browsers so I may be worrying about nothing.

share|improve this question

migrated from Jan 16 '10 at 3:58

This question came from our site for professional and enthusiast programmers.

I've been using it for a year+ on all my machines, no problems so far! cross-fingers – Brian Gianforcaro Jan 15 '10 at 7:22
up vote 16 down vote accepted

Vimperator - as all other extensions - are separated from the web page, so while the extension has full privileges of Firefox (it is in "Chrome" context), web pages can only access "direct" JS features. To be more clear, web pages don't even see whether vimperator is installed or not.

Martin (vimperator developer)

share|improve this answer
great thank you – Anonymous Jan 17 '10 at 4:10

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.