What other security hole is there for web devs to handle Ironically, as we introduce more expressive power in the browser (an untrusted execution environment)

What other security hole is there for web devs to handle Ironically, as we introduce more expressive power in the browser (an untrusted execution environment) to support SPAs, we are actually introducing more security issues: http://intercoolerjs.org/2016/02/17/api-churn-vs-security.html http://intercoolerjs.org/2016/02/17/api-churn-vs-security.ht... These are the crazy years.