FreedomofInformation said:
Javascript on the other hand, is merely a client-side scripting language for websites. Almost every website uses it, and turning it off completely will break most websites (including this one).
Javascript doesn't have the security problem this article is dealing with.
But it does have it's own problems and why is it used when a lot of it's functions can be done without it?
Depends on the situation? Sure, you can do "a lot" (very, very hard to define what that means) of what you can do with JS without it, however not all. In fact, in some ways, very few things can be done without JS. It has problems, yes, but so does every other software ever. If you're going to suggest not to use JavaScript we may as well unplug our computers from the web. And hey, just unplug them from the power, too - safer that way. There have been attacks against virtually anything to do with the web - Java, JavaScript, browsers, webservers, frameworks, backend systems, operating systems (both client and server) and, heck, even
people. The solution "just don't use it" is laughable and ridiculous - are we going to remove people, too? Safer that way, eh? No, the correct way to proceed is to be informed and using whatever you use wisely. JavaScript or whatever.