I'm not sure if this has been patched or not as I'm on a system version that still works with superfun. Anyway we can use dns redirection and the connection test under settings to invoke the edge browser while offline.
To do this you'll need to redirect dns requests for msftconnecttest.com to your local http server. You should also set a blank text file with the name "xboxncsi.txt" at the root of your http server. This basically tells the connection test that the file it tried to download was invalid. A valid one will have "Xbox NCSI" in the text file.
Of course we'll still need a web exploit for it to do anything useful however at least there's a way to run js code in offline retail.
To do this you'll need to redirect dns requests for msftconnecttest.com to your local http server. You should also set a blank text file with the name "xboxncsi.txt" at the root of your http server. This basically tells the connection test that the file it tried to download was invalid. A valid one will have "Xbox NCSI" in the text file.
Of course we'll still need a web exploit for it to do anything useful however at least there's a way to run js code in offline retail.