Path: csiph.com!v102.xanadu-bbs.net!xanadu-bbs.net!feeder.erje.net!eu.feeder.erje.net!eternal-september.org!feeder.eternal-september.org!news.eternal-september.org!mit.eternal-september.org!.POSTED!not-for-mail
From: Simon Lewis <simonlewis2001@gmail.com>
Newsgroups: comp.lang.java.programmer
Subject: Re: Java vs JavaScript
Date: Fri, 02 May 2014 12:53:26 +0200
Organization: Lewis
Lines: 24
Message-ID: <87ppjw5u55.fsf@gmail.com>
References: <mfnfl997i947ir4hae8fil7d60hnthg63m@4ax.com> <53583247$0$2956$e4fe514c@news2.news.xs4all.nl> <GO-dnaGkR7OrdcHOnZ2dnUVZ7o2dnZ2d@bt.com> <JavaScript-Security-20140427200029@ram.dialup.fu-berlin.de> <JavaScript-20140429065729@ram.dialup.fu-berlin.de> <G9udndYaBNn0YfzOnZ2dnUVZ8tidnZ2d@bt.com> <53620531$0$2877$e4fe514c@news.xs4all.nl> <qtd5m9dtb4sak4bniefr27a2kkveah5ufu@4ax.com>
Mime-Version: 1.0
Content-Type: text/plain
Injection-Info: mit.eternal-september.org; posting-host="75624d90079fdabee5670c8560d75772"; logging-data="25396"; mail-complaints-to="abuse@eternal-september.org";	posting-account="U2FsdGVkX18oEQW++9OioJuT0QFZOMFpv/O/w+/YOjw="
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.3 (gnu/linux)
Cancel-Lock: sha1:6TSNP4clsn/vouP1U4miegx5bWY= sha1:lAGxqARv2No2Tv8F+TSIYmisxEU=
Xref: csiph.com comp.lang.java.programmer:28354

Gene Wirchenko <genew@telus.net> writes:

> On Thu, 01 May 2014 10:26:25 +0200, Silvio <silvio@internet.com>
> wrote:
>
> [snip]
>
>>That is because JavaScript IS part of the HTML page and it can not 
>>contain a security hole by definition. Only the browser displaying the 
>>page can.
>
>      Oh, nonsense.  Put an onclick= in an <a> tag to go to a different
> URL than specified in the href=, and you have a security issue due to
> JavaScript.
>
> [snip]
>
> Sincerely,
>
> Gene Wirchenko

What total and utter ignorant bullshit.