welp, i guess it's time to switch to a different telegram client than the official one
0 Boosts
0 Likes
@stag telegram recently released 'sandboxed HTML widgets'. seems there isn't a real sandbox, they just run quickjs on the main thread so any vuln on that gives you a telegram RCE where the victim just needs to view the widget message
@mildsunrise@tech.lgbt what happened