4 ms·
I really like the comparison with right click deactivation. Anyway, people who use social engineering will still win; you can put JS code in the browser bar wi
by Artemis2 13y ago
I really like the comparison with right click deactivation.
Anyway, people who use social engineering will still win; you can put JS code in the browser bar with the good old javascript: "protocol" if you want somebody to execute something.
- adamnemecek 13y agoI think that executing JS in the URL bar is disabled in all browsers now.
- RandallBrown 13y agoWow, that really sucks. Bookmarklets can be really useful.
- pmh 13y agoBookmarklets still work fine (at least in Firefox and Chrome). It's just copy/pasting something with "javascript:" into the URL box that won't work.
- noblethrasher 13y agoStill works on Chrome 32/Win as of a minute ago.
- polarix 13y agoAbled in chrome 33.
- mrb 13y agoIf you (are tricked to) paste "javascript:..." it won't work. You have to manually type "javascript:" for it to work.
- brianshumate 13y agoActually, you can just type the "j" and then paste the rest.
- lukifer 13y agoDisabled in Safari and Firefox, still works in Chrome Canary.
- gizmo686 13y agoRunning Chromium 31.0.1650.63. Javascript still works from the URL bar.
- lukeschlather 13y agoNetflix isn't concerned with securing their users' browsers; they're concerned with protecting their DRM.
- nemothekid 13y agoI don't think Netflix's DRM is implemented in the browser.