{"id":110,"date":"2008-01-24T13:19:09","date_gmt":"2008-01-24T21:19:09","guid":{"rendered":"http:\/\/jaredrobinson.com\/blog\/?p=110"},"modified":"2009-07-11T04:22:18","modified_gmt":"2009-07-11T04:22:18","slug":"javascript-poor-security","status":"publish","type":"post","link":"https:\/\/jaredrobinson.com\/blog\/javascript-poor-security\/","title":{"rendered":"Javascript = poor security"},"content":{"rendered":"<p>Jake Edge writes about &#8220;[Web security vulnerabilities and Javascript](http:\/\/noscript.net\/)&#8221;:<\/p>\n<p>> Various recent, unrelated security issues seem to have a common thread: Javascript.<\/p>\n<p>This has been true for the past several years, and it&#8217;s not restricted to Javascript &#8212; it has happened with Flash. Our browsers suck down executable code from nearly every web site we visit, and run it. It enables a richer web browsing experience. Although JavaScript, and to a lesser extent, Flash, are somewhat restricted in what they can run on our computers, it opens the potential for abuse. And they have been [abused](http:\/\/www.securityfocus.com\/news\/11501), [again](http:\/\/www.darkreading.com\/document.asp?doc_id=143840) and [again](http:\/\/www.networkworld.com\/news\/2007\/040207-javascript-ajax-applications.html).<\/p>\n<p>What solutions exist?<\/p>\n<p>1. Stick head in sand.<br \/>\n3. Wait for web site owners and browser manufactures to fix the security problems. And wait. And wait. And wait some more.<br \/>\n2. Use Firefox and the [NoScript](https:\/\/addons.mozilla.org\/en-US\/firefox\/addon\/722) extension, which disables JavaScript, Flash, Silverlight and other executable code from running. It&#8217;s easy to enable JavaScript when needed.<\/p>\n<p>[NoScript](https:\/\/addons.mozilla.org\/en-US\/firefox\/addon\/722) can turn web browsing into a painful experience. Some web sites don&#8217;t function properly without JavaScript enabled. Functionality breakage may be subtle. I once bought movie tickets for the wrong day because I had JavaScript disabled. I still use NoScript.<\/p>\n<p>[NoScript](https:\/\/addons.mozilla.org\/en-US\/firefox\/addon\/722) has advantages beyond security: I see fewer annoying animated ads, making many web sites more readable.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Jake Edge writes about &#8220;[Web security vulnerabilities and Javascript](http:\/\/noscript.net\/)&#8221;: > Various recent, unrelated security issues seem to have a common thread: Javascript. This has been true for the past several years, and it&#8217;s not restricted to Javascript &#8212; it has happened with Flash. Our browsers suck down executable code from nearly every web site we &hellip; <\/p>\n<p class=\"link-more\"><a href=\"https:\/\/jaredrobinson.com\/blog\/javascript-poor-security\/\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\"> &#8220;Javascript = poor security&#8221;<\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[16,17],"tags":[],"class_list":["post-110","post","type-post","status-publish","format-standard","hentry","category-security","category-tech"],"_links":{"self":[{"href":"https:\/\/jaredrobinson.com\/blog\/wp-json\/wp\/v2\/posts\/110","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/jaredrobinson.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/jaredrobinson.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/jaredrobinson.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/jaredrobinson.com\/blog\/wp-json\/wp\/v2\/comments?post=110"}],"version-history":[{"count":1,"href":"https:\/\/jaredrobinson.com\/blog\/wp-json\/wp\/v2\/posts\/110\/revisions"}],"predecessor-version":[{"id":419,"href":"https:\/\/jaredrobinson.com\/blog\/wp-json\/wp\/v2\/posts\/110\/revisions\/419"}],"wp:attachment":[{"href":"https:\/\/jaredrobinson.com\/blog\/wp-json\/wp\/v2\/media?parent=110"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/jaredrobinson.com\/blog\/wp-json\/wp\/v2\/categories?post=110"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/jaredrobinson.com\/blog\/wp-json\/wp\/v2\/tags?post=110"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}