The real question should be why does a rendering engine execute code? And why are there no bounds or sanity checks performed on it? A shining example of trying to hat trick a release and cutting corners as opposed to QA. Slow and steady wins the race. Though even without time constraints doesn't guarantee bulletproof code.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/newsbriefs/89/392#392