dillo-browser/dillo

Mitigations against RCE vulnerabilities

Opened this issue · 0 comments

We may want to explore the posibility of using pledge(2) or a similar technology to limit the syscalls that can be used by the parser, or any code facing external information. The network facing code should be separated from the processing side.

The idea is to constraint posible RCE vulnerabilities to limit the posible damage it could do.

See: https://man.openbsd.org/pledge.2 https://justine.lol/pledge/