Perhaps we could describe a dynamic website as being a static website + extra (i.e. the dynamic stuff). As mentioned in the article, every dynamic website will

Perhaps we could describe a dynamic website as being a static website + extra (i.e. the dynamic stuff). As mentioned in the article, every dynamic website will also need some static assets (the .js files, images, etc.) So, it seems like a dynamic website will always have greater attack surface area than a static one, by definition. It will have all of the static site surface area, plus some more. ---- I wonder if there is room for a language that is not as general as JS, but can still be used to add dynamism to a website. So, you don't have to be stuck in the "it's Turing complete, so we can't be sure it's well-behaved before running it" situation. Perhaps CSS is kinda turning into that, these days. Though maybe CSS will become Turing complete too, at this rate (: