Hacker News Reader

Perhaps it's time for more granular Javascript blocking. Since forever it's been 'Enable Javascript yes / no'. This makes no real world sense to me anymore (if it ever did). Could there be an end-user friendly way to tell a browser to block Javascript that transmits your 'pre-submit' activity on a web site without breaking the site?

View on HN

No (imo). It'll be impossible to tell that apart from legitimate usage. JS can access the input fields, garble them, and send to the server. How would you tell that apart from say, a ticker request to update real-time prices?

I agree, with current technology it seems pretty impossible to differentiate. But I do think there is hope in the field of whitelisting, things that people commonly use JS for should be slowly added to the list of native features, as long as this process has oversight we could start having more responsive sites with less JS requirements.

Reply on news.ycombinator.com