That's not a problem with JavaScript, though. In that case, he could send whatev... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

kachnuv_ocasek on June 17, 2014 | parent | context | favorite | on: JavaScript Cryptography Considered Harmful

That's not a problem with JavaScript, though. In that case, he could send whatever he wanted.

marcosdumay on June 17, 2014 [–]

He can not send a browser plugin, nor can he send desktop software.

The only (dangerous) thing an attacker can send on this case is Javascript.

kachnuv_ocasek on June 17, 2014 | [–]

Of course he can send you executable content right away. He can also send you to a page and instruct you to download something.

Consider applying for YC's Fall 2026 batch! Applications are open till July 27.
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact