JavaScript and a Safe Web
Some of the most nefarious security problems on the internet are delivered to your browser via JavaScript. Likewise for some of the biggest annoyances, like pop-up ads. But JavaScript is the heart of many recent Web innovations as well. So what is a safe surfer to do? You can’t turn JavaScript off entirely, but maybe it can be controlled a bit better.
Using today’s web browsers, there is really just one big switch controlling JavaScript: it’s either on, or it’s disabled for your entire web experience. Pop-ups are usually blocked, but otherwise, that’s a pretty blunt control. I may not want some random site to potentially exploit some issue via JavaScript, but I can’t check my webmail without it. Disabling JavaScript completely isn’t a good option.
White-listing to the rescue! By explicitly saying which websites can run JavaScript in your browser, you can reduce your risk quite a bit. Unfortunately, in researching this post, I could only find one tool for this job: the NoScript add-on for Mozilla Firefox. I use it, but I expected to find similar offerings for the other web browsers.
So, here’s a new twist here at HTH. We’d like to know what our readers use for JavaScript control, if anything. Lots of folks also just block pop-ups (which is the default behavior in most recent browsers), or Flash, or plugins in general.
What do you use for JavaScript control, if anything?
Email
Twitter
