Deep Dive into Site Isolation (Part 2)

In the previous blog post, I explained how Site Isolation and related security features help mitigate attacks such as UXSS and Spectre. However, security bugs in a renderer process are really common, and therefore Chromium’s threat model assumes that a renderer process can be compromised and it can’t be trusted. To align with this threat model, Chromium announced improvements to Site Isolation in

[efcl]

compromised renderer processとSite Isolationについて。 compromisedな状態で、IPCのなりすまし、Protocol Register、特権ページの挙動のバグ、ブラウザ拡張のContent Scriptsを経由した情報取得など