Reply to post: Why do browsers allows JS from other domains to run

Ticketmaster breach 'part of massive bank card slurping campaign'

Anonymous Coward
Anonymous Coward

Why do browsers allows JS from other domains to run

I've never understood i) why a site would trust other sites to host code for them and ii) why browsers allow one site to run scripts from another.

If I ship an app I don't expect the users to download loads of components from third parties, i get the third party components, bundle and test them then distribute. This is the same thing.

I'm aware the genie is out of the bottle on this one but it grinds my gears. I get asked how to run scripts from other sites at job interviews, my answer is always "I would never do that, it's unprofessional". Doesn't get me many jobs mind.....

POST COMMENT House rules

Not a member of The Register? Create a new account here.

  • Enter your comment

  • Add an icon

Anonymous cowards cannot choose their icon

Biting the hand that feeds IT © 1998–2019