Pjc50 is correct. Practically every browser exploit over the last decade has had javascript as an essential component. Forcing users to enable javascript to u

Pjc50 is correct. Practically every browser exploit over the last decade has had javascript as an essential component. Forcing users to enable javascript to use a site is a bad idea because it makes them more vulnerable. Javascript should be a last resort to provide necessary functionality that is impossible to do in any other way. If you want to use javascript for frills, that's fine as long as the frills don't become obstacles if javascript is disabled. To put it into perspective, NoScript is the 4th most popular add-on to firefox. https://addons.mozilla.org/en-US/firefox/extensions/?sort=users https://addons.mozilla.org/en-US/firefox/extensions/?sort=us... Software like what you are developing needs to be designed with a strong security mindset from the beginning. It is a truism in the industry that security tacked on after the fact never works very well. I was extrapolating from the security naivete of your website design to the likely naivete of your software design.