Post #4071235

Recent advances in browser security, a thread! 🧵 TL;DR: Mohabi (OSDI 2026)¹ shows that we can build a principled in-process sandbox for a JavaScript runtime using SFI, at circa 25% runtime overhead in benchmarks. It’s not getting upstreamed, though. (1/x) __ ¹ Cf. @shravanrn@infosec.exchange’s post yesterday, https://infosec.exchange/@shravanrn/116972152609467885