Re: [GNU-linux-libre] servers which push random code to clients

[Luke]

On 04/14/21 20:40, quiliro@riseup.net wrote:
> bill-auger <bill-auger@peers.community> writes:
>
>>  - now that the javascript beast has escaped its web-browser cage, it
>> is a general concern for libre distro maintainers
> What do you mean by this statement?  Is it that Javascript does not need
> to be in the browser for some other program to execute it?
>
Correct. We are seeing a rise of many "web based apps".

This can be done one of two ways: either embedding a JavaScript VM in
your software, or a full fledged web browser.

Many users of these applications, especially if they are web based, are
running non-free and minified JS pushed from the web without realizing it.

Developers of such software have their choice of two embedded JS engines:
https://github.com/topics/v8 (primarily used by Node.JS)
https://github.com/topics/spidermonkey

And the popular Chromium-based electron browser engine:
https://github.com/topics/electron

Not all software that uses these are inherently evil, but it opens the
door for a lot of stuff that would normally only be possible in a web
browser and without the ability of being able to run NoScript or LibreJS
to mitigate the loss of freedom.