Hacker News new | ask | show | jobs
by TazeTSchnitzel 3715 days ago
> What's the reason for allowing web pages to get absolute screen coordinates?

Back in the 90's, Microsoft and Netscape were all too happy to give JS developers the world with almost no regard for security consequences.

We've spent the last 20 years trying to fix their mistakes.

1 comments

We only spent 15 years trying to fix the mistakes. The last 5 have been spent repeating them.
On the contrary, I would argue that most new web platform features have been designed with more thought for security. We generally ask for user permission first before divulging data, for example. Some new features help mitigate past mistakes, too, like Content Security Policies.