On: Yet another macOS privacy protections bypass

[saagarjha]

Safari uses APIs to protect its data directory that isn’t made available to third-party apps.

[EricE → saagarjha]

And those aren't good enough as he was able to bypass them with ls - command line tool ran without privilege inside of a sandboxed app.

This is a serious issue for data leakage.