3 ms·

I'm wondering if security was ignored, when introducing HTML5, simply because it isn't as sexy as adding new features? Removing XSS seems like a win to me, espe

by liamk 16y ago

I'm wondering if security was ignored, when introducing HTML5, simply because it isn't as sexy as adding new features? Removing XSS seems like a win to me, especially -- as Crockford points out -- with new technologies like web storage being introduced.

rimantas 16y ago
What are you talking about? How do you "remove XSS" — it is not some feature of HTML what you can just "remove". And no, security was not ignored.
- points 16y ago
  navigator.allowXSSAttacks = false If only the silly browser makers would set that flag to false sigh It's so easy!