Hacker News new | ask | show | jobs
by EasyMark 620 days ago
flatpak or firejail would have protected you from this vulnerability, not sure what they're on about here. They are 100% proof against everything of course.
1 comments

The firefox flatpak has write access to your home directory. So it can simply edit your bashrc even if there are no more direct escapes, no?
Firefox Flatpak has neither write or read permission to your home directory. At least that's my take from browsing file:///home/myuser. If you try to open or save a file using the native dialogs, you do grant the appropriate permission on demand, but that's using the xdg portal, outside the app scope, specifically designed for this.