ESCAPING THE CHROME SANDBOX THROUGH DEVTOOLS

Summary from the TLDR Web Dev newsletter

Vulnerabilities in Chromium allowed malicious Chrome extensions to execute arbitrary shell commands. By exploiting undocumented features in the chrome://policy page and a race condition in the chrome.devtools API, users were able to bypass the sandbox and execute code outside the browser's restrictions.