bug-librejs
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

LibreJS can be bypassed with new Function()


From: Ron Nazarov
Subject: LibreJS can be bypassed with new Function()
Date: Sat, 9 Sep 2023 19:24:15 +0100
User-agent: Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Thunderbird/102.15.0

LibreJS does not consider JavaScript using new Function() non-trivial, so you can bypass it with something similar to this:

new Function("<insert non-trivial JavaScript here>")()

A demo of this is available at https://361100.xyz/librejs-bypass.html

Attachment: OpenPGP_0x1D43EF4F4492268B.asc
Description: OpenPGP public key

Attachment: OpenPGP_signature
Description: OpenPGP digital signature


reply via email to

[Prev in Thread] Current Thread [Next in Thread]