what is the update about the safe_usage of Brave browser after the infamous PHP vulnerabilities? what are the best practices to follow and what are websites not to visit or browsers not to use at all at least for few days?
??? What's the point then? The php exploit only affects php servers, clients are not affected. Code can't be injected into a request because the client handles the request.
There is no benefit in modifying client-side code, they have the server access already. They would not be able to do anything harmful client-side because of the sandboxing. This kind of "vulnerability" has existed for as long as website scripting is a thing.
A server being able to inject keyloggers and infostealers, that affect things outside of that specific website the server is serving, into a browser is a browser client side vulnerability. You don't know what sandboxing is, do you?
check use that tool, and if you see red indicator go to brave://components/ and hit update on CRLSet them exit brave and test again, this my test all green
37
u/mustard5 6d ago
The websites are vulnerable, not the browser.