Live data from Hacker News

Block 39% of all HTML smuggling by just blocking JavaScript document.write()

xorlab.com

11–14 of 14 posts

Re: Block 39% of all HTML smuggling by just blocking JavaScript document.write()

#11
post #9

My email disallows images and javascript/html. I have yet to suffer for this. If anything it’s like the Adblock of email. And I’m not one of those “block all javascript on the Web” people.

Same (including that I am not one of those people who block JavaScript on the web; hell: I don't even use an ad blocker), though a few times a year I do run into a service that both explicitly provides a text/plain segment (so the mechanism that would just try to give me the text from the html segment isn't used) that is useless (missing links, doesn't have a text form of some code, etc.) and I have to open the code…

I didn’t even realize JavaScript in email was a possible thing until I opened this thread, and still don’t understand the use case for it.

Re: Block 39% of all HTML smuggling by just blocking JavaScript document.write()

#13
post #11
post #9

Earlier quoted context omitted.

Same (including that I am not one of those people who block JavaScript on the web; hell: I don't even use an ad blocker), though a few times a year I do run into a service that both explicitly provides a text/plain segment (so the mechanism that would just try to give me the text from the html segment isn't used) that is useless (missing links, doesn't have a text form of some code, etc.) and I have to open the code…

I didn’t even realize JavaScript in email was a possible thing until I opened this thread, and still don’t understand the use case for it.

It's not. Javascript is in the attachment to the email, like VBA is in an attached Excel file in an email.
Post reply on HN