[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: LibreJS can be bypassed with new Function()
|
From: |
Yuchen Pei |
|
Subject: |
Re: LibreJS can be bypassed with new Function() |
|
Date: |
Sun, 10 Sep 2023 10:27:34 +1000 |
|
User-agent: |
Gnus/5.13 (Gnus v5.13) Emacs/28.2 (gnu/linux) |
On Sat 2023-09-09 19:24:15 +0100, Ron Nazarov wrote:
> LibreJS does not consider JavaScript using new Function() non-trivial,
> so you can bypass it with something similar to this:
> new Function("<insert non-trivial JavaScript here>")()
> A demo of this is available at https://361100.xyz/librejs-bypass.html
Thanks for the report and the demo, I will take a look.
Best,
Yuchen
--
Timezone: UTC+10
PGP Key: 47F9 D050 1E11 8879 9040 4941 2126 7E93 EF86 DFD0
<https://ypei.org/assets/ypei-pubkey.txt>
signature.asc
Description: PGP signature