4 ms·

Turning off JS makes infection virtually impossible IMO, and pages load much faster. Some things break, but many don't and IME it's worth it.

• Tagbert 3y ago
  A lot of the most severe recent exploits have been from attacks embedded in images like Webp and EPS.
  • _a_a_a_ 3y ago
    have you some links please? (other than the one WebP exploit recently reported)
  • beebeepka 3y ago
    Webp needs js to run, does it not?
    • valleyer 3y ago
      Definitely not. WebP is an image format, akin to JPEG or PNG. Many modern browsers have built-in codecs. No JS required.
      • beebeepka 3y ago
        I've never been able to play one without enabling js