3 ms·

Not really. They gave permission for the initial GET request for the HTML. The rest of the requests were inserted into the document by the programmer and execut

Not really. They gave permission for the initial GET request for the HTML. The rest of the requests were inserted into the document by the programmer and executed by the browser. The browser assumed those links should be fetched automatically and executed. :)

Touche 9y ago
The rest of the requests were triggered by the browser, not the programmer, because they were part of the initial HTML and the browser follows the HTML spec. The person complaining about it and is technical and knows this, they were under no misconception that they were viewing a document format that doesn't include code execution. Of which I'm having trouble of even thinking of an example, because even Word documents can execute code by default. If you dislike HTML, then don't use it. Use another format that serves your text-only needs. Gopher is a possibility, just don't click on any HTML files if you're using a web browser though.
- 801699 9y ago
  Trivial to strip HTML tags and produce useful text. Send all the extraneous garbage you want to the user. She can remove it and keep only what she wants. Meanwhile from the user's perspective you are wasting bandwidth. Who is paying for that bandwidth?
- bphogan 9y ago
  I was oversimplifying, hense the smiley. But since you want to argue... A request to an HTML document with no JavaScript src links, image links, or CSS links will not make multiple requests. I'm old enough to remember when I had to actively tell images to load. The code for the page is written by programmers. Programmers cause browsers to make multiple requests. Often times without understanding "the spec".
  - lgas 9y ago
    Unless there's a non-JS src link, or a non-CSS link tag, or an xml:base attribute, or an area element with an href attribute, or... you get the idea.
    - bphogan 9y ago
      All things put in by a programmer. You get my point.
- mnm1 9y ago
  No, according to the spec, I can enable / disable JS and not run any code, which I'm doing: https://html.spec.whatwg.org/#enabling-and-disabling-scripting https://html.spec.whatwg.org/#enabling-and-disabling-scripti... So an HTML document viewed in a browser with JS off should not itself run code, ever.

Touche 9y ago

The rest of the requests were triggered by the browser, not the programmer, because they were part of the initial HTML and the browser follows the HTML spec. The person complaining about it and is technical and knows this, they were under no misconception that they were viewing a document format that doesn't include code execution. Of which I'm having trouble of even thinking of an example, because even Word documents can execute code by default. If you dislike HTML, then don't use it. Use another format that serves your text-only needs. Gopher is a possibility, just don't click on any HTML files if you're using a web browser though.

801699 9y ago
Trivial to strip HTML tags and produce useful text. Send all the extraneous garbage you want to the user. She can remove it and keep only what she wants. Meanwhile from the user's perspective you are wasting bandwidth. Who is paying for that bandwidth?
bphogan 9y ago
I was oversimplifying, hense the smiley. But since you want to argue... A request to an HTML document with no JavaScript src links, image links, or CSS links will not make multiple requests. I'm old enough to remember when I had to actively tell images to load. The code for the page is written by programmers. Programmers cause browsers to make multiple requests. Often times without understanding "the spec".
- lgas 9y ago
  Unless there's a non-JS src link, or a non-CSS link tag, or an xml:base attribute, or an area element with an href attribute, or... you get the idea.
  - bphogan 9y ago
    All things put in by a programmer. You get my point.
mnm1 9y ago
No, according to the spec, I can enable / disable JS and not run any code, which I'm doing: https://html.spec.whatwg.org/#enabling-and-disabling-scripting https://html.spec.whatwg.org/#enabling-and-disabling-scripti... So an HTML document viewed in a browser with JS off should not itself run code, ever.