Multiple upvars

[ego-lay_atman-bay]

Guys, just read the entire reason js was turned off by default

Snap! version 6.9 and the JavaScript Function block

So, about a week ago, we had our first serious malware attack using users' ability to write JavaScript code in the Snap! environment to present users with a fake version of the snap.berkeley.edu web site, with the goal both of collecting passwords and of potentially infecting users' computers. We've known all along that the JS Function block was a security hole, but our users are generally well behaved and we're not a bank or anything, so I'm pretty sure this was the first real attack (as oppos…

Javascript can be dangerous, even if you're trying to avoid it. If you want to avoid malicious websites, just turn off javascript. This is basically what the snap team did, only just for the javascript function block because obviously snap requires javascript to run.