Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I recently discovered Vimperator, which is just awesome. However, it concerns me that I can execute shell commands from the browser.. is this exploitable? I'd really hate to get "sudo rm -r /*"'d. I don't know too much about web browsers so I may be worrying about nothing.

share|improve this question

migrated from stackoverflow.com Jan 16 '10 at 3:58

This question came from our site for professional and enthusiast programmers.

1  
I've been using it for a year+ on all my machines, no problems so far! cross-fingers –  Brian Gianforcaro Jan 15 '10 at 7:22

1 Answer 1

up vote 16 down vote accepted

Vimperator - as all other extensions - are separated from the web page, so while the extension has full privileges of Firefox (it is in "Chrome" context), web pages can only access "direct" JS features. To be more clear, web pages don't even see whether vimperator is installed or not.

Martin (vimperator developer)

share|improve this answer
    
great thank you –  Anonymous Jan 17 '10 at 4:10

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.