JDownloader Community - Appwork GmbH
 

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 19.01.2018, 17:48
thomaz thomaz is offline
JD Adviser
 
Join Date: Sep 2009
Posts: 104
Default Is JDownloader secured against Spectre .js Attacks?

Many People have huge Problems with those "System Patches" against Spectre and Meltdown.

Firefox was patched to make it more stable against Spectre .js Remote Attacks.

But how is it with Jdownloader?
Reply With Quote
  #2  
Old 19.01.2018, 18:04
Jiaz's Avatar
Jiaz Jiaz is offline
JD Manager
 
Join Date: Mar 2009
Location: Germany
Posts: 79,290
Default

JDownloader plugins usually do not execute JS code from website. Plugins parse html/js code (not execute). Some plugins however do execute JS but the code is often self constructed/combined by the plugin developer and the JS engine is heavily limited (can't compare it with Browser JS engine) and restricted(no http requests for example).
I don't see any danger at the moment but of course if someone finds vulnerabilities or has hints how to escape/bypass, we will check and update accordingly
__________________
JD-Dev & Server-Admin
Reply With Quote
  #3  
Old 20.01.2018, 00:28
raztoki's Avatar
raztoki raztoki is offline
English Supporter
 
Join Date: Apr 2010
Location: Australia
Posts: 17,611
Default

99.5% of our plugins do not load any javascript into javascript engine. Only a few (remainder ~0.5%) do load javascript though typically limited in what it can load. If you can find any issue please let us know.

raztoki
__________________
raztoki @ jDownloader reporter/developer
http://svn.jdownloader.org/users/170

Don't fight the system, use it to your advantage. :]
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

All times are GMT +2. The time now is 01:53.
Provided By AppWork GmbH | Privacy | Imprint
Parts of the Design are used from Kirsch designed by Andrew & Austin
Powered by vBulletin® Version 3.8.10 Beta 1
Copyright ©2000 - 2024, Jelsoft Enterprises Ltd.