chaos.social
boosted
is mark-of-the-web a security boundary?
RE: https://infosec.exchange/@burritosec/115850040770342356
#Fediverse has decided Mark-of-the-web is NOT a security feature.
So can we now please drop any shitty CVE that claims not honoring it would be?
Like back then when #7Zip got shit for it...