News for hackers. Stuff that matters.

A comment on See what JavaScript commands get injected through an in-app browser. Parent comment

Re:See what JavaScript commands get injected through an in-a... by mark_l_watson on Thursday August 18, 2022 @10:25PM (#32517070)
+1 thanks for the info - it makes sense that Apple would try to mitigate this on their platform.

I use Apple’s new Lockdown Mode on the beta iOS 16 and iPadOS 16. I generally like it. It largely disables arbitrary JavaScript, as far as I know. A few times a week, I will turn off Lockdown temporarily for a few minutes for a web site if there are any problems. This is usually Amazon.com’s Kindle preview feature.

[ Parent | on HN ]
Re:See what JavaScript commands get injected through an in-a... by leodriesch on Friday August 19, 2022 @03:31AM (#32518385)
Lockdown mode is a security measure and not a privacy one.

It disables JavaScript JIT compilation, which makes it slower but more secure.

It should not disable any JavaScript execution itself.

[ Parent | on HN ]
Re:See what JavaScript commands get injected through an in-a... by MBCook on Thursday August 18, 2022 @10:48PM (#32517169)
Do we know if lockdown’s JS protection applies to apps using WKWebView? That could flat out break a lot of apps.

I thought lockdown mostly applied to system stuff (including Safari).

[ Parent | on HN ]