5 ms·
JS was meant to be a simple scripting language for web pages. But now that we have huge applications we're compiling from C or C++, plaintext isn't the best for
by TazeTSchnitzel 10y ago
JS was meant to be a simple scripting language for web pages. But now that we have huge applications we're compiling from C or C++, plaintext isn't the best format.
Binary formats are nothing new to the web, it's used them for images and such for a long time now. In fact, the one raster plaintext image format (XBM) is no longer supported.
- z3t4 10y agoThe attack vector of a image format is minuscule compared to actual running code. It's not like you are worrying about a jpg image performing an x-site injection. SVG's are quite popular!
- TazeTSchnitzel 10y agoFont and image binary format parsing have been the source of plenty of zero-days over the years. :)