Embed Notice
HTML Code
Corresponding Notice
- Embed this notice@i @alex @mint @bot Its main advantage is it can be run in a JS free web browser since it doesn't require JS to work. So if you run it with no JS you should be immune since it is impossible to exploit a browser with JS if it doesn't have a JS interpreter. You would still be at risk of media exploits though (e.g. pdfs, ect.), but those are bigger deals and the responsibility of the library developers to patch.
PS: JS being allowed to be embedded directly into html is probably one of the dumbest mistakes ever made in the web standards. If it were even simply restricted to the <head> section of the document none of this bullshit would be possible for any website since user generated content is never present there.