13 Critical Holes in a JavaScript Sandbox Could Allow Arbitrary Code Execution

vm2 was designed to contain untrusted JavaScript. Thirteen newly disclosed vulnerabilities show how quickly that security boundary can… Continue reading on JavaScript in Plain English »