6 ms·

Pretty sure that its not limited to js: https://gist.github.com/ErikAugust/724d4a969fb2c6ae1bbd7b2a9e3d4bb6 https://gist.github.com/ErikAugust/724d4a969fb2c6ae

Pretty sure that its not limited to js: https://gist.github.com/ErikAugust/724d4a969fb2c6ae1bbd7b2a9e3d4bb6 https://gist.github.com/ErikAugust/724d4a969fb2c6ae1bbd7b2a9... Its a technique, not a flaw in js, from my understanding

Godel_unicode 9y ago
This PoC is implemented in js, but my point stands regardless of the language used. It requires code executing on the same physical server as your app in order to be an issue for you. Similar to a hypervisor escape (since we're being pedantic yes, I understand this is not a hypervisor escape), the evil neighbor surface is not present if you have no neighbors.