[saagarjha]

> If you had read the article you would have known that the JS code executed here is JS found on the Interent, not any JS written by Avast.

I think this makes it worse.

[SahAssar]

Yes, but it also means that this is not implemented because of "low-effort JS developers".