← Back to context

Comment by oever

7 hours ago

That means going back to disabling Javascript or only allowing widely used, well-maintained Javascript libraries.

4 comments

oever

Reply
mschuster91  6 hours ago

> or only allowing widely used, well-maintained Javascript libraries.

That isn't a guarantee either, just last month someone compromised the Axios library.

  • skydhash  4 hours ago

    They stole the axios's npm keys and they uploaded malicious artifacts. They did not takeover the axios's repo. The issue is with packaging and distribution, not with code.