Node.js has just released fixes for 10 security vulnerabilities that could put node-powered applications at risk and is urging everyone to update their systems.
Node.js has just released fixes for 10 security vulnerabilities that could put node-powered applications at risk and is urging everyone to update their systems.
Nothing wrong with static sites!
but what about vulnerabilities in the web server? 😱
Just staple your website to a telephone pole
That would be the best result if everyone just went back to static sites.
https://motherfuckingwebsite.com/
Has pure HTML (no css, no javascript) ever had a serious security issue? On the server side obviously not (outside of the apache/nginx/etc. having application bugs), but even on the client side has there ever been an exploit?
I think there’s been one or two image decompression exploits over the years, so a site with a malicious file could end up running code on your system. I remember this being an issue with Minecraft clients and player skins at one point, but I can’t remember any specific times this happened in browsers tho.
I build custom websites that run primarily on css and html. Light JS for applications, and some simple PHP to tie everything together. I am unaware of any flaw or exploit that would disable my sites. I don’t recall any html vulnerabilities. Unless there’s e-commerce involved, that’s nothing I can think of that would be exploitable on either side for html or css. These are both hard coded into the browser so I’m not even sure what an exploit would accomplish other than changing values on the client side. But it’s been a long week…
Edit Looks like zarobi below remembered some exploits. Totally forgot about iframes and the weird image data exploits.
My man
That’s why my site will always be html monke.