3 ms·
Sure, but that's still a user action. The point is that the browser can't read anything simply by the user landing on the page - the user has to do something to
by onion2k 5y ago
Sure, but that's still a user action. The point is that the browser can't read anything simply by the user landing on the page - the user has to do something to enable it, even if they're not aware of the consequence of that action. This stops most malicious usage.