veniasilente

and it seems they want to only allow it in urgent cases where terrorist attacks

Then they just have to call anything they don't like "terrorist attack" (let's say, a comment on climate change) and bam, instant nazism.

not working Friday

How did you acquire this power?

They use Arch btw!

BRO JUST ONE MORE CHURU, BRO

Maybe instead of removing the RCE, we can lock down the sandbox better and reduce the amount of information advertisers can collect.

By all means but then someone do it, because it's 2025 and even Firefox sends all this information that is absolutely not needed to show a webpage. It's at least 25 years late by this point.

If you remove code execution in the browser, then many websites will need to ship desktop apps instead.

Which in quite more than just some cases would be good, precisely because some things should be native programs instead of requiring that the web browser basically provides all the tasks of the OS.

Just because there are other ways to serve you ads does not at all mean we should not be able to not only stop at least one, but also the one which is most dangerous since it literally allows for RCE on all clients. by design.

JavaScript is needed to actually build anything useful.

Underage user detected!

Yes.

It's impressive that for a technology that's supposed to be better than Mastodon (bloated) or Reddit (ass-corporate), Lemmy still relies on the same basic evils.

the website wouldn’t need to embed any JS code.

That's the point.

Okay lemme make sure but...

...this is the UK right? Where Windsor is located? Where they have literal royalty? With castles and stuff? Where they have all the money ill-gotten from invading Africa and the Americas?

And they are expecting the commoneers to pony up to place a statue for a cat?

Those people (Mastercard et al) do not listen to people, they listen to money.

Show them guillotines and molotovs so they understand they might not live to use their money, and they'll pay (regardless of if you pardon my pun) attention.