Adblock Plus filter lists may execute arbitrary code in web pages
https://armin.dev/blog/2019/04/adblock-plus-code-injection/ [armin.dev]
2019-04-15 18:50
Under certain conditions the $rewrite filter option enables filter list maintainers to inject arbitrary code in web pages.
I’d say this is somewhat working by design, but there’s a problem that we have large unauditable auto updating piles of magic hiding in everything we touch.
source: HN