Linux sandboxing improvements in Firefox 60
> The one exception to the network policy, for now, is the X11 protocol which is used to display graphics and receive keyboard/mouse input<p>Well, this makes everything else moot, since you can just inject keystrokes and thus trivially take over the system... (in addition to probably many other vulnerabilities in the X11 server)<p>They should try to do a proper isolation job (meaning no I/O other than shared memory and pipes to another Firefox process), not this apparently useless effort.