Hacker News new | past | comments | ask | show | jobs | submit login

"Web browser executes javascript" is not exactly shocking. Every single browser in it's default configuration does before the proper NoScript (or NoScript-alike) is added. This doesn't seem like a significant vulnerability since it is the default mode of operation of modern web browsers. Use a pdf reader if you want something moderately more secure.



The problem is embedding a browser into an app that may not maintain the same security boundaries as a “proper” web browser.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: