Maybe then haven't even realized the damage that running external code in your app can do. Amethyst runs the browser in a separate OS process in a way that disk, cpu and memory are fully isolated from one another. That's 50,000 lines of custom sandbox code just to do that.
Basically, the xdc game can see your nsec/wallet credentials in memory if it wants.
Login to reply
Replies (1)
Not if they just open in a web view. I have seen all kinds of security issues over the years. All your DMs are visible, they can access the camera, microphone, do a key logging. There are so many forms of attacks. Of course, the default libraries are trying their best to isolate it but the surface layer is absolutely massive, especially when you allow wasm binaries.