3

The two main issues that come to mind would be installation of malware via browser vulnerabilities and exploitation of vulnerabilities in other websites. Exploiting client-side vulnerabilities in other websites Examples: CSRF, XSSI, XSS, JSONP, CORS, postmessage, clickjacking, etc. As you mentioned, tabs are sandboxed fairly well because of the same ...


3

Brave developer here. We do not try to conceal whether you have used Tor or not -- that would be a little difficult. We do, however, avoid storing your private browsing history. If you find evidence of your private browsing history stored there, please let us know or file a bug. You appear to be using a slightly older version of Brave (1.0.0) from before ...


1

In my opinion, it's a problem that NoScript cannot solve. NoScript allows you to browse the internet while trying to enable as little JavaScript as possible. In most cases you will be able to read text without enabling anything. But in some cases you will need to trust the main website and enable virtually everything to be able to use their services. In ...


1

The Cloudfront URL is a unique identifier for namecheap' CDN. There is nothing to worry about these urls. Regarding your question why to use such URL: my guess is that they don't use Cloudfront for their entire website (maybe not AWS at all). So they only use Cloudfront for their assets. Although I don't see it your screenshot if the Cloudfront URL is used ...


Only top voted, non community-wiki answers of a minimum length are eligible