Hacker News new | ask | show | jobs
by lawl 4700 days ago
Uhm, I think they have noscript bundled with JS globally disallowed? IIRC, that is.
1 comments

They do include noscript, but with JS globally enabled. Noscript will cleanse XSS/CSRF requests and prevent some sorts of clickjacking (according to noscript.)