zero days and the privilege escalation are a luxury.
bad code is often plaged with injection/sql injection. Which sandbox does an absolute NOTHING to protect you from. After all, it is all within the expected side effects of your code.
bad code is often plaged with injection/sql injection. Which sandbox does an absolute NOTHING to protect you from. After all, it is all within the expected side effects of your code.
my point is that false sense of security makes it even easier for an attacker to use readily available privileges in the badly coded application.