3 ms·
Perhaps because security isn't binary. Browsers should sandbox JS such that it's harmless, but sometimes fail at that. Letting fewer random strangers run JS in
by Zak 3y ago
Perhaps because security isn't binary. Browsers should sandbox JS such that it's harmless, but sometimes fail at that. Letting fewer random strangers run JS in your browser reduces your attack surface area.
- bell-cot 3y agoTHIS, but `sed 's/fewer/far, far fewer/'` AND - the owners of the (relatively) few web sites that most people visit are far more invested in staying malware-free, vs. the Ad companies letting ~anyone on the planet run js in ads, at "what's their credit card good for?" scale.
- bhouston 3y agoAds generally run in iframes and iframes are considered a form of sandboxing.