Hacker News new | ask | show | jobs
by egberts1 1713 days ago
As a long-time Pelican (CSS, no Javascript, serverless) static site generator, I am intrigued to know if this Javascript-free approach can be continued with this Astro and maybe Sevlte.

It has to be JS-free because I am a vulnerability researcher on JS/WASM-based “file-less” malware.
1 comments
VMtest 1713 days ago
I would appreciate if you can share your knowledge on these vulnerabilities
link
egberts1 1712 days ago
Only advices (at this critical juncture) are to keep your website’s CSP very tight, your APIs authenticated. and protected by MFA especially to supplant PII with website-specific index/sequence numbers. Also to mandate HTML5 nonce element usages on all things referenced.
link