Hacker News new | ask | show | jobs
by Guvante 48 days ago
Isn't breaking the sandbox the hard part?

RCE is effectively "can run code" which is just JavaScript if you ignore the sandbox.