Linux sandboxing improvements in Firefox 60
> The one exception to the network policy, for now, is the X11 protocol which is used to display graphics and receive keyboard/mouse inputWell, this makes everything else moot, since you can just inject keystrokes and thus trivially take over the system... (in addition to probably many other vulnerabilities in the X11 server)They should try to do a proper isolation job (meaning no I/O other than shared memory and pipes to another Firefox process), not this apparently useless effort.