4 ms·
Or, maybe downloading arbitrary code from the internet without even a same-origin check, and being able to dynamically construct executable JavaScript from down
by tannhaeuser 7y ago
Or, maybe downloading arbitrary code from the internet without even a same-origin check, and being able to dynamically construct executable JavaScript from downloaded binary data masked as image and then have a whole generation of developers depend on this model wasn't so good an idea after all.
- Santosh83 7y agoIt enables SaaS and makes economic sense and sadly the latter is the only thing that matters when it comes to mass human behaviour.
- tannhaeuser 7y agoMakes economic sense for cloud providers that is. For users, developers, content creators, and all others, not so much.
- altfredd 7y agoeval() has no economic purpose. It hasn't been removed by browsers purely because that would break backward compatibility. Non-same origin Javascript does not have economic purpose either. I believe, that it will be completely eradicated from browsers within this century (if not in couple of decades).