[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: LibreJS can be bypassed with new Function()

From: Yuchen Pei
Subject: Re: LibreJS can be bypassed with new Function()
Date: Sun, 10 Sep 2023 10:27:34 +1000
User-agent: Gnus/5.13 (Gnus v5.13) Emacs/28.2 (gnu/linux)

On Sat 2023-09-09 19:24:15 +0100, Ron Nazarov wrote:

> LibreJS does not consider JavaScript using new Function() non-trivial,
> so you can bypass it with something similar to this:

> new Function("<insert non-trivial JavaScript here>")()

> A demo of this is available at https://361100.xyz/librejs-bypass.html

Thanks for the report and the demo, I will take a look.


Timezone: UTC+10
PGP Key: 47F9 D050 1E11 8879 9040  4941 2126 7E93 EF86 DFD0

Attachment: signature.asc
Description: PGP signature

reply via email to

[Prev in Thread] Current Thread [Next in Thread]