New browser attack lets hackers run bad code even after users leave a web page

  • Is this actually exploitable with the current set of browsers?

    Looking at the documentation of the API [https://developer.mozilla.org/en-US/docs/Web/API/ServiceWork...]

    and it says in a yellow note at the top of the docs This feature was mentioned as an idea in the SW explainer at some point, but as yet has not been implemented anywhere.

    My guess is that is only an experimental feature currently