There’s a mobile phone game I play that launched over a decade ago called Lords and Knights, I recently started using the web version for it as well. I noticed when I open the map my CPU utilization goes from around a solid 10% to an average of 40% with peaks just over 60%, I have a 9800X3D. The map is a static image and only loads onto my screen once.
How do I find out if it just runs poorly or if it’s running something nefarious in the background?
Thanks!
Update: I can’t log into the server anymore, but I still have access to the site itself.
Does any of this mean anything?
I’m don’t know much about programming and how software runs, but escape its sandboxing doesn’t sound good. As well as the “violating content security policy” bit…
The wikipedia article on sandboxing makes this sound pretty bad
Those are warnings, intended to help point out insecure configuration of those elements.
An iframe on the site is set up in such a a way that a site hosted inside the iframe could break out of its sandbox. This definitely isn’t ideal, but it doesn’t mean that anything malicious is or is not happening.
It is concerning because it means that if the content they’re displaying in the iframe is provided by a third party, such as advertisements, then there are open doors for them to possibly access information they shouldn’t have access to, etc.
As for the Content Security Policy, it is what it says. It’s a policy to help prevent things like cross site scripting attacks. The browser blocked a script from loading because it violated the policy. Again, that doesn’t necessarily mean the script is malicious, but just the same the browser blocked it from loading to be safe.
What does it mean? Well your original question is still mostly unanswered.
The console is a place to log and report on warnings, errors, debug statements and other helpful information. If the website code is executing correctly (as in without errors, not necessarily benevolently) or is suppressing console statements, then you’re not likely to see much beyond the messages the browser displays on its own.
