W3C home > Mailing lists > Public > whatwg@whatwg.org > July 2010

[whatwg] Please disallow "javascript:" URLs in browser address bars

From: Bjartur Thorlacius <svartman95@gmail.com>
Date: Sat, 24 Jul 2010 00:33:05 +0000
Message-ID: <4c4a34d5.8113e30a.521a.2291@mx.google.com>
> 99.9999% of people have never manually entered a javascript: URL
> into a browser addressbar in their life -- unless duped by a social
> engineering virus.

Wrong.  Plain wrong. Kids who like to test stuff do things like this. I
do agree though that the urlbar isn't the right place, there should be
a different prompt for this kind of stuff.  Probably disabled at compile
time by default and accessible by recompile (or addon).
Received on Friday, 23 July 2010 17:33:05 UTC

This archive was generated by hypermail 2.4.0 : Wednesday, 22 January 2020 16:59:25 UTC