Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • World
  • Users
  • Groups
Skins
  • Light
  • Brite
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (No Skin)
  • No Skin
Collapse
Brand Logo

agnos.is Forums

  1. Home
  2. Ask Lemmy
  3. Does blocking javascript make web browsing safer?

Does blocking javascript make web browsing safer?

Scheduled Pinned Locked Moved Ask Lemmy
asklemmy
9 Posts 7 Posters 3 Views
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • gedaliyah@lemmy.worldG This user is from outside of this forum
    gedaliyah@lemmy.worldG This user is from outside of this forum
    [email protected]
    wrote last edited by
    #1
    This post did not contain any content.
    joekrogan@lemmy.worldJ J max_p@lemmy.max-p.meM R M 6 Replies Last reply
    12
    • gedaliyah@lemmy.worldG [email protected]
      This post did not contain any content.
      joekrogan@lemmy.worldJ This user is from outside of this forum
      joekrogan@lemmy.worldJ This user is from outside of this forum
      [email protected]
      wrote last edited by
      #2

      Yes because scripts can execute on page load just by visiting the site. I block by default and only allow as needed on sites.

      1 Reply Last reply
      6
      • gedaliyah@lemmy.worldG [email protected]
        This post did not contain any content.
        J This user is from outside of this forum
        J This user is from outside of this forum
        [email protected]
        wrote last edited by [email protected]
        #3

        .

        1 Reply Last reply
        33
        • gedaliyah@lemmy.worldG [email protected]
          This post did not contain any content.
          max_p@lemmy.max-p.meM This user is from outside of this forum
          max_p@lemmy.max-p.meM This user is from outside of this forum
          [email protected]
          wrote last edited by
          #4

          Yes, a lot safer. Even bugs in the renderer or media player would typically be triggered by JavaScript by say, moving elements around really fast or whatever.

          Without JavaScript, the browser renders that page and that's it, there's no JS to modify it or open popups, nothing to dynamically load/refresh content. The most you can do without JS is animations and responding to simple events like changing the color of a button when the mouse is over it. So your only shot to attack this is the renderer during initial page load, once.

          P 1 Reply Last reply
          7
          • gedaliyah@lemmy.worldG [email protected]
            This post did not contain any content.
            R This user is from outside of this forum
            R This user is from outside of this forum
            [email protected]
            wrote last edited by
            #5

            Yes. Most malicious code will be rendered by your browser using JS.

            To simplify this I run two browsers, one for logins and the other for general usage without JS enabled.

            No JS also makes surfing more private as your browser discloses far less information about your computer. Check out any of the browser fingerprinting sites with and without JS running. The details about your computer are far greater with JS enabled.

            Bonus, seldom does a paywall stop me from reading an article. You know those popup that tell you how many free articles you have left this month? Most sites use JS to keep track of that.

            1 Reply Last reply
            1
            • gedaliyah@lemmy.worldG [email protected]
              This post did not contain any content.
              R This user is from outside of this forum
              R This user is from outside of this forum
              [email protected]
              wrote last edited by
              #6

              Yes. Most malicious code will be rendered by your browser using JS.

              To simplify this I run two browsers, one for logins and the other for general usage without JS enabled.

              No JS also makes surfing more private as your browser discloses far less information about your computer. Check out any of the browser fingerprinting sites with and without JS running. The details about your computer are far greater with JS enabled.

              Bonus, seldom does a paywall stop me from reading an article. You know those popup that tell you how many free articles you have left this month? Most sites use JS to keep track of that.

              1 Reply Last reply
              5
              • max_p@lemmy.max-p.meM [email protected]

                Yes, a lot safer. Even bugs in the renderer or media player would typically be triggered by JavaScript by say, moving elements around really fast or whatever.

                Without JavaScript, the browser renders that page and that's it, there's no JS to modify it or open popups, nothing to dynamically load/refresh content. The most you can do without JS is animations and responding to simple events like changing the color of a button when the mouse is over it. So your only shot to attack this is the renderer during initial page load, once.

                P This user is from outside of this forum
                P This user is from outside of this forum
                [email protected]
                wrote last edited by
                #7

                https://www.spacejam.com/1996/

                joekrogan@lemmy.worldJ 1 Reply Last reply
                1
                • P [email protected]

                  https://www.spacejam.com/1996/

                  joekrogan@lemmy.worldJ This user is from outside of this forum
                  joekrogan@lemmy.worldJ This user is from outside of this forum
                  [email protected]
                  wrote last edited by
                  #8

                  Peak internet

                  1 Reply Last reply
                  1
                  • gedaliyah@lemmy.worldG [email protected]
                    This post did not contain any content.
                    M This user is from outside of this forum
                    M This user is from outside of this forum
                    [email protected]
                    wrote last edited by [email protected]
                    #9

                    Yes, as it basically is just foreign, untrustworthy Code executed on your own PC.
                    But total blocking will make most of the web unusable.
                    I use a selective Script blocker extension (Noscript), that lets you instead choose which domains are allowed to use Javascript.
                    Works great after the initial try-and-error setup phase.

                    1 Reply Last reply
                    10
                    Reply
                    • Reply as topic
                    Log in to reply
                    • Oldest to Newest
                    • Newest to Oldest
                    • Most Votes


                    • Login

                    • Login or register to search.
                    • First post
                      Last post
                    0
                    • Categories
                    • Recent
                    • Tags
                    • Popular
                    • World
                    • Users
                    • Groups