News for hackers. Stuff that matters.
Re:There is a pure HTML Gmail, and it still works by Kiro on Wednesday April 02, 2014 @02:48AM (#7513981)
Why not block CSS while you're at it?
Re:There is a pure HTML Gmail, and it still works by userbinator on Wednesday April 02, 2014 @03:05AM (#7514030)
CSS is not a Turing-complete language on which the bulk of security vulnerabilities relies. The majority of CSS used on webpages is truly beneficial to the user.

(That said, I will turn off CSS on a page that abuses it; the majority of them don't, it's not a security risk, and it makes the page look better most of the time, so no problems with having it on by default.)

Re:There is a pure HTML Gmail, and it still works by aestra on Wednesday April 02, 2014 @09:20AM (#7515270)
stupid question - what do you consider an abuse of CSS?

Do people abuse javascript? Absolutely! However, I think JS can make the page look much better. Ajax loads are quicker than page refreshes, autocomplete is very useful, reply boxes that are loaded inline on demand, Hiding of parts of the page if the user wants to, (long comment threads...) table headers that scroll with the table, etc, etc. The really crummy thing about JS is it has gotten so much negative attention because of the abuses and that's what people focus on.

I really don't like the move to JS dialogs myself though. I don't think that they are beneficial to the user in many cases. Especially when a video or picture is displayed in a JS dialog.

Re:There is a pure HTML Gmail, and it still works by jacquesm on Wednesday April 02, 2014 @04:15AM (#7514214)
Re:There is a pure HTML Gmail, and it still works by userbinator on Wednesday April 02, 2014 @05:06AM (#7514331)
> it's Turing-complete so long as you consider an appropriate accompanying HTML file and user interactions

In other words, CSS won't just sit there and consume CPU cycles unless you actively interact with the page, unlike JS. The highest-voted comment on the first answer there says that a bit more explicitly.

Re:There is a pure HTML Gmail, and it still works by CJefferson on Wednesday April 02, 2014 @05:18AM (#7514366)
CSS animations will certainly consume CPU cycles