News for hackers. Stuff that matters.

A comment on World of Warcraft: one simple line of code can cost you dearly.

Re:World of Warcraft: one simple line of code can cost you d... by kalleboo on Monday July 25, 2016 @12:43PM (#12159854)
Ahh... allowing users to run code they don't understand. The same reason Facebook tried to kill the Chrome Dev Tools[0] and Apple more recently killed the javascript: URL scheme in the address bar

[0] https://news.ycombinator.com/item?id=7222129

[ Parent | on HN ]
Re:World of Warcraft: one simple line of code can cost you d... by pmarreck on Monday July 25, 2016 @06:03PM (#12161950)
> and Apple more recently killed the javascript: URL scheme in the address bar

wait, WHAT? This isn't good! This raises the barrier of entry for new programmers to play with Javascript! I had no idea this was done!

[ Parent | on HN ]
Re:World of Warcraft: one simple line of code can cost you d... by Nadya on Monday July 25, 2016 @06:04PM (#12161955)
And for those of us who use Bookmarklets - it has made Safari a non-choice of browser.
[ Parent | on HN ]
Re:World of Warcraft: one simple line of code can cost you d... by andrethegiant on Monday July 25, 2016 @06:40PM (#12162135)
Just enable `Develop > Allow JavaScript from Smart Search Field` in the menubar.
[ Parent | on HN ]
Re:World of Warcraft: one simple line of code can cost you d... by kalleboo on Tuesday July 26, 2016 @01:11AM (#12163465)
Bookmarklets still work for me (and as andrethegiant said, you can re-enable it in the Develop menu)
[ Parent | on HN ]
Re:World of Warcraft: one simple line of code can cost you d... by Nadya on Tuesday July 26, 2016 @05:48PM (#12168969)
So what is the point of trashing the Javascript URI? People with malicious intent will just have the person make the code into a bookmarklet and run it. Which is actually easier than explaining how the URL bar works.

Or does it do what Chrome does and you can't copy/paste Javascript: until the URL bar you have to type "Javascript:"?

[ Parent | on HN ]
Re:World of Warcraft: one simple line of code can cost you d... by erezyehuda on Tuesday July 26, 2016 @02:12PM (#12167632)
All they need to do is open the developer console, which is probably better anyway.
[ Parent | on HN ]