|
|
|
|
|
|
by wtbob
3641 days ago
|
|
|
> What do you exactly mean with "remote-execution-by-default"? As far as I know, all browsers have strict "same-origin" policies by default. Even with the same-origin policy, the default behaviour of a web browser is to execute code it downloads from a remote site (i.e., remote to your computer); as it turns out, this is an utter disaster for security and privacy, turning what is a relatively securable platform (HTML+CSS) into a nightmare. It is not, today, possible to be secure and private while allowing JavaScript. That's a problem. |
|
|