Web Security · Senior · Question 21 of 75
Why were SharedArrayBuffer and high-resolution timers restricted after Spectre?
- 1Because they used too much memory
- 2Because they didn't work over HTTPS
- ✓Correct answer: They make precise timing side channels possible, letting a page read memory of other origins in the same process
Explanation
Cross-origin isolation guarantees no other origin's data is in the process, so those APIs are safe again.