Hacker News new | past | comments | ask | show | jobs | submit
Insimwytim | on: Exit IP VPN servers mitigation rollout
On a side note, buttons icons on this page won't load without javascript. I cannot comprehend what would justify such decision.
jermaustin1 | parent | next
Without justifying it, the reason is simple. They are using a front end framework (bootstrap) that many developers use/understand that also supports 99.9% of browsers.

Running a browser without javascript that you still want graphics to display (so not a screenreader or text-based-browser), is part of the .1% they are willing to disappoint.

Do I think it is overkill? Sure. Do I still use jQuery at work even though the vast majority of its once handy features are now baked into JS in the browser by default? Of course.

fc417fc802 | root | parent
How do you jump straight from JS to screen reader or text based browser? What happened to HTML+CSS viewer? Isn't reading an RFC the perfect poster child for an activity that ought to consist of viewing a noninteractive document?
UqWBcuFx6NV4r | parent | next
It’ll be a run-on effect of whatever framework they are using, and they very justifiably don’t want to bother catering to you. Having JS disabled in 2026 and complaining about sites not behaving is simply a performative act.
GoblinSlayer | root | parent | next
2015: It's a SPA blog because my employer forced me to do it that way, I didn't want it.

2026: It's a SPA blog because I very justifiably don't want to bother catering to you. Having JS disabled in 2026 and complaining about sites not behaving is simply a performative act.

akimbostrawman | root | parent | next
>and they very justifiably don’t want to bother catering to you

Considering they are one of the very few sites and VPNs that allow sign up without JS your claim is verifiably false. They also collaborate with and develop there own tor browser fork which has the highest rate of non JS user.

lazide | root | parent | next
It’s basic self defense. Who runs around the web in 2026 allowing random JS? Might as well be licking seats on the subway.
Telaneo | root | parent | next
> Who runs around the web in 2026 allowing random JS?

Within a rounding error, 100% of people on the internet.

loading story #48284471
lmm | root | parent
If you trust your browser it's fine, and if you don't then both CSS and SVG are significantly more risky.
margalabargala | root | parent | next
This isn't true at all.

Anything SVG does maliciously, it does by containing JavaScript, so SVG's worst case is a subset of JS's.

fc417fc802 | root | parent | next
Remind me again what the ratio of browser sandbox escapes coupled with full RCE is between JS, CSS, and SVG?
sysguest | root | parent
> then both CSS and SVG are significantly more risky.

how???

simoncion | parent | next
What "buttons icons"? When I set the "javascript.enabled" preference in Firefox 151 to "false" and reload the page for RFC 5737, I get a "Javascript disabled? Blah blah blah blah." complaint near the top of the page. I do not get

* the useless-to-me "document history" bar graph at the top

* the automatic switch to Dark Mode(TM) that I don't care about

* functional pull down menus at the very tippy top of the page that are entirely unrelated to RFCs that I give zero shits about

The "without javascript" version of the page seems to me to be otherwise identical. Amusingly, the "Email authors", "IPR", & etc buttons switch to the pages they reference notably faster with Javascript disabled.

What broken things were you seeing that I haven't mentioned? Were you using Chrom(e|ium)? Safari?

Insimwytim | root | parent
> I set the "javascript.enabled" preference in Firefox 151 to "false" and reload the page

Do it the other way around - disable javascript first, clear cache/open incognito (maybe close/open browser after that just for good measure), then go to the page.

If you load it with javascript first - buttons icons stay loaded after you disable it.

ernsheong | parent
Are you in 2006 or 2026?