> That's not arbitrary code in the security sense though True, you're right. > It's the very narrow range of things which are permitted to run in a javascrip

> That's not arbitrary code in the security sense though True, you're right. > It's the very narrow range of things which are permitted to run in a javascript sandbox Well, yes and no. Narrow scope in terms of what other programming languages offer, yes. But in terms of limiting the amount of information that can leak from the user (you and your browser), it's not that narrow. And since est31 is making the privacy-argument, I'm guessing they are referring to that. Cover Your Track by EFF showcases how much information is actually leaking and what Twitter et al could do with it: https://coveryourtracks.eff.org/ https://coveryourtracks.eff.org/