On 24/10/20 11:40 pm, kristof.mul...@telenet.be wrote: > I don't think this is an issue. All modern browsers can > handle javascript.
Yes, most modern browsers can execute JavaScript.
Do you want your browser to execute ${WEBSITE}'s JavaScript?
Do you have the time to review the minified JavaScript code that website
calls up to see if it is safe?
Do you have the expertise to conduct such a review?
I'm fine with JavaScript on a site that actually requires it to
accomplish the task it is designed for. These are called client-side
web applications. They're not simple web pages. Embeetle's own service
would be a good example here: bit hard to make a browser-based
development environment without some sort of client-side code executing,
whether it be JavaScript, Adobe Flash, Sun Java applets, etc.
Pages where the content is updated "live", sure, JavaScript all the way.
Rendering *static* menus and text on a page is not a job that JavaScript
is required for. It's a biiiig attack surface for little benefit.
--
Stuart Longland (aka Redhatter, VK4MSL)
I haven't lost my mind...
...it's backed up on a tape somewhere.
--
Stuart Longland (aka Redhatter, VK4MSL)
I haven't lost my mind...
...it's backed up on a tape somewhere.
signature.asc
Description: OpenPGP digital signature
_______________________________________________ OpenOCD-devel mailing list OpenOCD-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openocd-devel
