3 ms·
So that your browser vendor can force their philosophical decisions about file formats on their users. That's basically it. Security is supposedly an issue, b
by DarkShikari 16y ago
So that your browser vendor can force their philosophical decisions about file formats on their users. That's basically it.
Security is supposedly an issue, but "clicking on a video file in your browser to play it" is no easier than clicking "open file" in a download prompt -- if there's a vulnerability in your media player, attackers don't need <video> to get to it.
- nitrogen 16y agoI think you may be slightly biased here :). A security exploit that requires clicking is a lot less serious than one that happens without user intervention. Since <video> and <object>/<embed> can play automatically, it makes sense to limit the tags' exposure to unknown code from the operating system's installed codecs.
- deleted 16y ago[deleted]