4 ms·

When an article states "...the bug relies on executing malicious JavaScript...", why is the bug considered to be in the plugin and not JavaScript?

• kaikai 7y ago
  Using a programming language to exploit something doesn't mean the programming language is flawed.
  • paulnpace 7y ago
    So, are they using the phrase "malicious JavaScript" correctly? Shouldn't they remove "malicious"?
    • woodrowbarlow 7y ago
      "malicious code" is code that was written with the express purpose of exploiting a weakness or flaw. they're not saying javascript is malicious. they're saying someone could write malicious javascript code (and then trick a user into executing it) that exploits a flaw in lastpass.