3 ms·
JavaScript is the main attack vector on browsers. Why are you surprised that people don't want to run it?
by fsflover 3y ago
JavaScript is the main attack vector on browsers. Why are you surprised that people don't want to run it?
- lmm 3y agoJavaScript is the main way of delivering attacks because it's the main way of getting a browser to do anything. Actual vulnerabilities tend to be anywhere (image decoding in particular) and you can trigger them from anything, it's just easier to trigger them from JavaScript rather than some absurd spaghetti CSS.
- fsflover 3y agoAs the OP says, many things can be done without it.