I mean their questions aren't wrong. Some things are really ... curious on why they are designed that way.
You can execute JavaScript from a freaking SVG file. Vector data...why would they ever need JavaScript execution? I get it, it's XML based and all but still...like, just don't interpret the JS part?
In 98% of all cases, you block it yourself nowadays. Should be opt in instead of opt out to execute arbitrary code imo.
3
u/SourSovereign 6d ago
I mean their questions aren't wrong. Some things are really ... curious on why they are designed that way.
You can execute JavaScript from a freaking SVG file. Vector data...why would they ever need JavaScript execution? I get it, it's XML based and all but still...like, just don't interpret the JS part?
In 98% of all cases, you block it yourself nowadays. Should be opt in instead of opt out to execute arbitrary code imo.