JavaScript to the operating system's API with superuser privileges. These flaws have affected major browsers including Firefox, Internet Explorer, and Safari. Plugins, such as video players, Adobe Flash, and the wide range of ActiveX controls enabled by default in Microsoft Internet Explorer, may also have flaws exploitable via JavaScript (such flaws have been exploited in the past). In Windows Vista, Microsoft has attempted to contain the risks of bugs such as buffer overflows by running the Internet Explorer process with limited privileges. Google Chrome similarly confines its page renderers to their own "sandbox". Web browsers are capable of running JavaScript outside
Web typography SVGOpenTypeFonts. Firefox has supported SVG OpenType since Firefox 26. Linking to industry-standard "TrueType" (TTF) and "OpenType" (TTF/OTF) fonts is supported by Mozilla Firefox 3.5+, Opera 10+, Safari 3.1+, and Google Chrome 4.0+. Internet Explorer 9+ supports only those fonts with embedding permissions set to installable. The Web Open Font Format (WOFF) is essentially OpenType or TrueType with compression and additional metadata. WOFF is supported by Mozilla Firefox 3.6+, Google Chrome 5+, Opera Presto, and is supported by Internet Explorer 9 (since March 14, 2011). Support is available on Mac OS X Lion's Safari from release 5.1. Only two fonts available