CraSSh pure-CSS vulnerability

Post by **barbaz** » Wed Dec 05, 2018 10:15 pm

https://cras.sh/

I tried the PoC in a VM, and it froze the entire VM!

I had to force power off the VM.

Is it possible for an extension (maybe NoScript?) to mitigate this sort of thing?

Post by **therube** » Thu Dec 06, 2018 1:03 am

Already fixed on the FF end, scheduled for FF 65, I believe.

PM: https://forum.palemoon.org/viewtopic.ph ... 20#p157120

Post by **barbaz** » Thu Dec 06, 2018 1:41 am

therube wrote:Already fixed on the FF end, scheduled for FF 65, I believe.

Post by **therube** » Thu Dec 06, 2018 3:36 am

Yeah, that's the one I saw the other day.

Post by **GµårÐïåñ** » Thu Dec 06, 2018 3:57 am

Tried it, didn't do anything for me, just crashed the tab it was on and that's it.

InformAction Forums