370
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
this post was submitted on 27 Jun 2024
370 points (98.7% liked)
Technology
59081 readers
3484 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related content.
- Be excellent to each another!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, to ask if your bot can be added please contact us.
- Check for duplicates before posting, duplicates may be removed
Approved Bots
founded 1 year ago
MODERATORS
all the more reason to use an adblocker... and a script blocker if you don't mind the extra clicks to get a whitelist going or to temporarily allow them somewhere.
Way too many people still don't understand that this is an essential part of the security equation. Many sites execute 10+ scripts, many of which are doing who the fuck knows what, and said sites typically only need like 1 to 3ish allowed to function.
Sure it's inconvenient compared to not doing anything, but it's mostly front loaded inconvenience. Once you get things dialed in for frequently used sites, and learn to tell at a glance what needs to be allowed, its really not much hassle at all tbh.
May I ask you what script blocker I should use? I use Firefox with ublock.
NoScript
Are there shared whitelists? It seems like something that isn’t really practical without them. I’m a web developer who has never served one ad but the front-end tools now basically export all JavaScript. You’d probably just get a blank page on any site made recently that’s more complex than a portfolio/resume page.
Larger sites cater towards scriptless web for accessibility requirements.
Smaller sites don't need SPA, so will most likely work to some degree.
The better (not necessarily bigger) blog systems will use scripting for fancy things, but will have fallbacks and will still work.
It's the middle tier web-app (and sites that want to be a web app but have no reason to be) that will run SPA without any fallback. You know, the ones that want to send notifications and know your location and all that fun stuff.
The person you're explaining websites to is a web developer and they are correct. There being a ton of websites needlessly dependent on JavaScript is well known and long lived.