Hacker News new | ask | show | jobs
by a1369209993 1888 days ago
Turing-complete is (kind of) irrelevant, the question is what (equivalent of) system calls is has access to. Eg, javascript should not be able to set cookies or cause network traffic after page load by default.

> all you need to be able to do is make an HTTP request

Precicely. Inability to do this is (part of) what > > heavily restricted javascript means.

1 comments

Haha yeah, never going to happen. No network calls = no real-time dashboards, which is a no-go for basically any company. Not only that, it doesn't really solve the issue. You can just make the user click a button which triggers the network call anyways, and bam you can track again. Restricting javascript wouldn't work.