3 ms·
The worst case is not an off-center web page, the worst case is exposing user information or making your backend attackable in other ways. Just because you use
by danbruc 12y ago
The worst case is not an off-center web page, the worst case is exposing user information or making your backend attackable in other ways. Just because you use JavaScript and it runs on a client machine far away you are not magically protected from screwing up.
- HCIdivision17 12y agoSure. Yes, security is hard. You got me there. Javascript does not decrease your attack surface, and is not, in fact, magic. That's not a free-pass negation of my point that crashing a browser tab is substantially less severe than a kernel panic, and thus likewise greater engineering due diligence is needed for its code. There's nothing magical about it.