Re: [xml-dev] Re: Javascript and plugging holes

["Simon St.Laurent" <simonstl@simonstl.com>]

On 12/10/10 10:02 AM, Stephen Green wrote:
>> At the same time, Mobile Device manufacturers are pushing for the opposite.
>> They want JS to do MORE not LESS.
>
> The virus-script-kiddies haven't paid so much attention to smartphones
> yet, I guess.

There are lots of security holes in JavaScript and the Web environment, 
and many of them happen to work on phones too now.

This is a known problem - Douglas Crockford (creator/extractor of JSON) 
spoke about it at XML 2007, and there's some discussion of it in this 
interview too:

<http://answers.oreilly.com/topic/1483-doug-crockford-discusses-javascript-html5-security-issues/>

I'd watch all of it, but security comes up around 2:12 and 4:23 in an 
HTML5 context.

-- 
Simon St.Laurent
http://simonstl.com/