Hacker News new | ask | show | jobs
by dancek 3530 days ago
Obviously.

The quoted paragraph is buildup to the fact that AngularJS evals content on purpose, and does not really even try to be secure against maliciously-crafted DOM. Browsers, on the other hand, are designed to resist attacks.

But yes, certainly you need to trust the browser more than an extension.