undefined | Better HN

0 pointsUqWBcuFx6NV4r9h ago0 comments

It’ll be a run-on effect of whatever framework they are using, and they very justifiably don’t want to bother catering to you. Having JS disabled in 2026 and complaining about sites not behaving is simply a performative act.

0 comments

lazide7h ago

It’s basic self defense. Who runs around the web in 2026 allowing random JS? Might as well be licking seats on the subway.

Telaneonew16m ago

> Who runs around the web in 2026 allowing random JS?

Within a rounding error, 100% of people on the internet.

lmm7h ago

If you trust your browser it's fine, and if you don't then both CSS and SVG are significantly more risky.

margalabargala5h ago

This isn't true at all.

Anything SVG does maliciously, it does by containing JavaScript, so SVG's worst case is a subset of JS's.

fc417fc8024h ago

Remind me again what the ratio of browser sandbox escapes coupled with full RCE is between JS, CSS, and SVG?

sysguest7h ago

> then both CSS and SVG are significantly more risky.

how???

j / k navigate · click thread line to collapse