QupZilla / qupzilla

Cross-platform Qt web browser
http://www.qupzilla.com
GNU General Public License v3.0
1.12k stars 348 forks source link

Spectre vulnerability? #2533

Closed ghost closed 6 years ago

ghost commented 6 years ago

Is QupZilla vulnerable to Spectre as Chrome and Firefox seem to be?

nowrep commented 6 years ago

Yes, everything is vulnerable.

ghost commented 6 years ago

So can we do such things as Chrome and Firefox do to mitigate it?

nowrep commented 6 years ago

Yes, but you need to wait for updated QtWebEngine.

ghost commented 6 years ago

In the meantime, does disabling js globally and enabling it when necessary mitigate against it, or am I being paranoid?