Thread: Security Issues
View Single Post
Old 05-12-2023, 09:07 AM   #2
ownedbycats
Custom User Title
ownedbycats ought to be getting tired of karma fortunes by now.ownedbycats ought to be getting tired of karma fortunes by now.ownedbycats ought to be getting tired of karma fortunes by now.ownedbycats ought to be getting tired of karma fortunes by now.ownedbycats ought to be getting tired of karma fortunes by now.ownedbycats ought to be getting tired of karma fortunes by now.ownedbycats ought to be getting tired of karma fortunes by now.ownedbycats ought to be getting tired of karma fortunes by now.ownedbycats ought to be getting tired of karma fortunes by now.ownedbycats ought to be getting tired of karma fortunes by now.ownedbycats ought to be getting tired of karma fortunes by now.
 
ownedbycats's Avatar
 
Posts: 11,033
Karma: 75555555
Join Date: Oct 2018
Location: Canada
Device: Kobo Libra H2O, formerly Aura HD
https://calibre-ebook.com is https and has a valid certificate. wtf are you on about?

and user login requirements - other than the server (where it does exist), why is that needed?

also, see this:
https://bugs.launchpad.net/calibre/+bug/2011811

Quote:
If you have something specific to say beyond "cripple your application
in arbitrary ways to make me happy while I wave around the security
word", feel free to post further, otherwise kindly dont waste my time.
Quote:
Book HTML is displayed inside a sanboxed by the browser iframe which is
itself run inside a sandboxed by the OS chromium process. I made a whole
lot of design decisions that greatly complicated the viewer code for the
sake of security. Barring bugs scripts in books have no access to
anything on your system.

There are no known security issues in the calibre viewer that are not
also present in chromium itself. In other words, reading books is at
least as safe as browsing the internet (slightly safer because of the
sandboxed iframe).

Last edited by ownedbycats; 05-12-2023 at 09:11 AM.
ownedbycats is online now   Reply With Quote