[prev in list] [next in list] [prev in thread] [next in thread] 

List:       evolution
Subject:    Re: [Evolution] Evolution sandbox?
From:       "theapplepie () differentmail ! com" <theapplepie () differentmail ! com>
Date:       2020-04-07 15:38:57
Message-ID: 4af12f83dc7707c6811c8ffc001e619f4608aa9d.camel () differentmail ! com
[Download RAW message or body]

> no, the 3.36.x (and earlier) version does not use WebKitGTK+
> sandboxing
> (neither current development version, for what it worth).
> 
> Evolution itself has its own web extensions (Michael wrote about them
> in the article), one for the (message) preview, one for the composer.
> Evolution has disabled user-provided JavaScript code (not every
> exploit
> involves JavaScript, I know) and it controls what is loaded from the
> outside (the remote content settings in Evolution). I do not think
> it's
> any close to real sandboxing, but it also tries to show HTML mails in
> slightly restricted environment.

Hi Milan

Thanks a lot for your helpful and interesting answer!

_______________________________________________
evolution-list mailing list
evolution-list@gnome.org
To change your list options or unsubscribe, visit ...
https://mail.gnome.org/mailman/listinfo/evolution-list
[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic