> As a developer who uses JavaScript in the web, I'm curious why people think it's insecure? Can you tell me what features of JavaScript are insecure and how can one make malicious code with JavaScript run in a browser?

Here's something https://noscript.net/faq#qa1_10 and here's some more https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox/

> If there are known security issues concerning JavaScript running in a browser, then those issues should definitely be fixed on the side of the browser.

It's the unknown vulnerabilities that are the real problem.

Reply via email to