Escaping well-configured VSCode extensions (for profit)

By Vasco Franco In part one of this two-part series, we escaped Webviews in real-world misconfigured VSCode extensions. But can we still escape extensions if they are well-configured? In this post, we’ll demonstrate how I bypassed a Webview’s localResourceRoots by exploiting small URL parsing differences between the browser—i.e., the Electron-created Chromium instance where VSCode and […]

The post Escaping well-configured VSCode extensions (for profit) appeared first on Security Boulevard.

browser chromium electron escape exploiting extensions instance parsing profit security security boulevard series url vscode webview world