6 ms·

JS enabled by default seems every day less secure.

by nkjoep 2mo ago

emctech 2mo ago
So many website break completely with JS disabled and you end up having to enable it half the time anyway.
- masfuerte 2mo ago
  It was pretty good until about six months ago. Since then loads of sites have added a js requirement to try to stop the AI bots.
- ruuda 2mo ago
  About half of the time, when a website doesn't work with js disabled, I realize that I didn't want to see the page that badly anyway, and I close the tab.
MisterTea 2mo ago
IMO web browser have been enabling all sorts of obnoxious behavior since before JS. One of my all time favorites were the sites that opened pop-ups in a loop faster than you could close them while an audio clip of a guy yelling "Hey everyone! I'm looking at gay porn!" You had to hit reset. Fuck the Web.
- afandian 2mo ago
  The web around the late 90s and early 2000s had some really sketchy stuff. I think the difference is that it used to be the sleazy underbelly. Now it's accepted as mainstream. My local 'newspaper' website is chock full of scam adverts. The print version is dignified. The website people, somehow, turn a blind eye. And I got an advert on Youtube this week using sexually explicit language to sell pills. Feels like standards, and expectations, have really slipped.
- grishka 2mo ago
  Opening a popup needs JS though.
  - nozzlegear 2mo ago
    Not with the new popover API.
    - grishka 2mo ago
      This doesn't look like it gives websites something they couldn't do before with CSS and JS.
      - nozzlegear 2mo ago
        I'm pretty sure it does but maybe I'm wrong, I had never tried to create popovers/popups using CSS. What's neat[†] about the popovers API is that it doesn't need any JS, you just write a couple of HTML attributes and voila, a popover/popup. They will run with JS disabled as well. https://chrisburnell.com/html-can-do-that/ https://chrisburnell.com/html-can-do-that/ [†] Neat for me building things like tooltips and dropdowns into my web apps without using JS; not neat for annoying people with popups.
        grishka 2mo ago
        The core trick to making a popover, tooltip, or, really, any kind of overlay element that's anchored to something on the page is putting an element with `position: absolute` inside one with `position: relative`. You can make it display on hover with CSS alone too, if you really want to.

JS enabled by default seems every day less secure.

by nkjoep 2mo ago

JS enabled by default seems every day less secure.

emctech 2mo ago

So many website break completely with JS disabled and you end up having to enable it half the time anyway.

masfuerte 2mo ago
It was pretty good until about six months ago. Since then loads of sites have added a js requirement to try to stop the AI bots.
ruuda 2mo ago
About half of the time, when a website doesn't work with js disabled, I realize that I didn't want to see the page that badly anyway, and I close the tab.

MisterTea 2mo ago

IMO web browser have been enabling all sorts of obnoxious behavior since before JS. One of my all time favorites were the sites that opened pop-ups in a loop faster than you could close them while an audio clip of a guy yelling "Hey everyone! I'm looking at gay porn!" You had to hit reset. Fuck the Web.

afandian 2mo ago
The web around the late 90s and early 2000s had some really sketchy stuff. I think the difference is that it used to be the sleazy underbelly. Now it's accepted as mainstream. My local 'newspaper' website is chock full of scam adverts. The print version is dignified. The website people, somehow, turn a blind eye. And I got an advert on Youtube this week using sexually explicit language to sell pills. Feels like standards, and expectations, have really slipped.
grishka 2mo ago
Opening a popup needs JS though.
- nozzlegear 2mo ago
  Not with the new popover API.
  - grishka 2mo ago
    This doesn't look like it gives websites something they couldn't do before with CSS and JS.
    - nozzlegear 2mo ago
      I'm pretty sure it does but maybe I'm wrong, I had never tried to create popovers/popups using CSS. What's neat[†] about the popovers API is that it doesn't need any JS, you just write a couple of HTML attributes and voila, a popover/popup. They will run with JS disabled as well. https://chrisburnell.com/html-can-do-that/ https://chrisburnell.com/html-can-do-that/ [†] Neat for me building things like tooltips and dropdowns into my web apps without using JS; not neat for annoying people with popups.
      - grishka 2mo ago
        The core trick to making a popover, tooltip, or, really, any kind of overlay element that's anchored to something on the page is putting an element with `position: absolute` inside one with `position: relative`. You can make it display on hover with CSS alone too, if you really want to.