4

I recently discovered Vimperator, which is just awesome. However, it concerns me that I can execute shell commands from the browser.. is this exploitable? I'd really hate to get "sudo rm -r /*"'d. I don't know too much about web browsers so I may be worrying about nothing.

1
  • 1
    I've been using it for a year+ on all my machines, no problems so far! cross-fingers
    – Brian Gianforcaro
    Jan 15, 2010 at 7:22

1 Answer 1

16

Vimperator - as all other extensions - are separated from the web page, so while the extension has full privileges of Firefox (it is in "Chrome" context), web pages can only access "direct" JS features. To be more clear, web pages don't even see whether vimperator is installed or not.

Martin (vimperator developer)

0

You must log in to answer this question.