Embed Notice

@Suiseiseki if you don't update your web browser, every attack is possible with and without JS.

JS already requires permissions for critical operation.

JS requests are subject to CORS and cannot be arbitrary.

Web apps from YouTube to your bank need same-domain background requests to work, its normal.

Unless both the DNS and the site is compromised and you are specifically targeted, JavaScript can't hack your LAN.

JavaScript is executed in a sandbox and sometimes cached, never installed.