> As a developer who uses JavaScript in the web, I'm curious why people think
it's insecure? Can you tell me what features of JavaScript are insecure and
how can one make malicious code with JavaScript run in a browser?
Here's something https://noscript.net/faq#qa1_10 and here's some more
https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox/
> If there are known security issues concerning JavaScript running in a
browser, then those issues should definitely be fixed on the side of the
browser.
It's the unknown vulnerabilities that are the real problem.