> Most legitimate Websites will not use hidden or obfuscated JavaScript, and few will redirect users without authorization, he explained. What? This was addre

> Most legitimate Websites will not use hidden or obfuscated JavaScript, and few will redirect users without authorization, he explained. What? This was addressed on reddit [1]: Since I'm the person who submitted this data for the annual security report inside of Cisco and also have the interviews surrounding this... 91% of client side compromises had to do with the java plugin to the browser. Java applets, not server side java. Sometimes JavaScript is used to obfuscate the applet, the applet load, or the entire page, the vulnerability is not in JavaScript. [1] http://www.reddit.com/r/programming/comments/1vj917/java_primary_cause_of_91_percent_of_attacks_cisco/cesybqn http://www.reddit.com/r/programming/comments/1vj917/java_pri...