Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> Are we really supposed to cater to the sub 2% that chooses not to use javascript?

In my opinion: No.

JavaScript should be treated as default feature of the browser now. It's about as worth the effort as catering to people who want to use Lynx as their browser.

The screen reader argument is bogus too, modern screen reader software is not hampered by JS.

I also wonder if those who disable JS because of the increased attack surface also disable CSS as well.



What about those that disable js because you didn't test your js on their mobile browser and it renders the site unusable?


Don't troll. CSS cannot run arbitrary code on your device.


Actually there are some CSS vulnerabilities that works without JavaScript like <div> overlay affecting phishing attacks: http://i8jesus.com/?p=10

Via: http://stackoverflow.com/questions/718611/css-injection-what...


Neither can JS, as it is sandboxed.

The interpretation and application of CSS directives is not Turing complete, but often enough to leak information from your browser.





Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: