From plug-discuss-bounces@lists.phxlinux.org Thu Jan 4 13:32:39 2018 Return-Path: X-Original-To: lurker@lists.phxlinux.org Delivered-To: lurker@lists.phxlinux.org Received: from phxlinux.org (localhost [127.0.0.1]) by phxlinux.org (Postfix) with ESMTP id BC75632A01BC; Thu, 4 Jan 2018 13:32:39 -0700 (MST) X-Original-To: plug-discuss@lists.phxlinux.org Delivered-To: plug-discuss@lists.phxlinux.org Received: from mail-qt0-f195.google.com (mail-qt0-f195.google.com [209.85.216.195]) by phxlinux.org (Postfix) with ESMTPS id 42EE132A01B6 for ; Thu, 4 Jan 2018 13:32:38 -0700 (MST) Received: by mail-qt0-f195.google.com with SMTP id d4so3389789qtj.5 for ; Thu, 04 Jan 2018 12:32:38 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to; bh=WD2EnBNW19T0ptIgtUkvyq4ueRvEnGd0atBl4siQeVs=; b=jtWA66JqqQV6DGj64TxdTMXVzHolKnVFruLecmoK4C8m/Z895SRrB11MIWJImRflQr 0qdrY9e9qcJxHON6t2Afd0hZyooD+rpX1Q3C3L1qrY+HOYMocAxKqBgSiBUbz1X731Gu H7837iymQV11yexGf1+BZAe+XSPgpV4kKKOy0Uv7hZa6ra371qYckjshJ8rHK+yGgu4I OJZ5PiqNKpS2AB9F3N6Q5CkxoZBadDz586NLbFQmTz0KgQS8HMNRK/jnt+uGZr2d8OzO havGvWe44c6lwJWI6v3+hG5aq+cXyohkxrI50WZrLI2xI5mftvUMT9lUngDNi4KByNFF hW3A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to; bh=WD2EnBNW19T0ptIgtUkvyq4ueRvEnGd0atBl4siQeVs=; b=R5jOb4f6v77nlk+TOW1/u5b9vryWB+0pYqjWV+RkSLVcJWyr4LwmBKQmWXhT2jfxUi VXZI2cbSMTcwejLTONWrbBryuqwOxE2TsLkgUmARqpJJcvB7XEfUiCnAC/PHCcpDdFnp vOhSR5loRBTxUTJdy8WRDuV+nezN08k3Vd8rDfmCaXDGK/BMgGBjarGkOx4IAHXR2WKP DRoEB128SaKIPJ94/0w3X/Bn15yRJ4PSBH134RO5UXzlpwd7lzbz9CmGLyWHGM9xkN0t lzMhcKxLQ7BaxuAGuL/74FXJ1xPUI+n2rchc5lA9i9eqHyJi6ivmA7E+aDoYE2Cx5bII uXZw== X-Gm-Message-State: AKwxyteYpVh9RVzrtnsnJR5MjcmhPQHfV/krrcqYu2WadeG9FevWHEv7 YNNWm0zamw7Zl5HsyZgEIAKY/W7VS+uTNeVyEnFWLQ== X-Google-Smtp-Source: ACJfBouLFINyKjDwtAnQD2DpfRi6ZX7UfUaWQsFmTAuUiRlgQaoC55VVWkMSvva06kSvr0X8OPg+6X0mlI1/42OdC0E= X-Received: by 10.200.20.146 with SMTP id l18mr1221349qtj.105.1515097957290; Thu, 04 Jan 2018 12:32:37 -0800 (PST) MIME-Version: 1.0 Received: by 10.12.194.68 with HTTP; Thu, 4 Jan 2018 12:32:36 -0800 (PST) In-Reply-To: References: From: Andrew McRobb Date: Thu, 4 Jan 2018 13:32:36 -0700 Message-ID: Subject: Re: HTML5 as JS To: Main PLUG discussion list X-BeenThere: plug-discuss@lists.phxlinux.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: Main PLUG discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: Main PLUG discussion list Content-Type: multipart/mixed; boundary="===============1905335860854563897==" Errors-To: plug-discuss-bounces@lists.phxlinux.org Sender: "PLUG-discuss" --===============1905335860854563897== Content-Type: multipart/alternative; boundary="089e0826f81c8b58b70561f93b24" --089e0826f81c8b58b70561f93b24 Content-Type: text/plain; charset="UTF-8" No, HTML5 is a markup at the end of the day. Comparing JS and HTML, is like comparing apples to oranges. All HTML5 does is include new tags to use when building a web app for you or search engines to use: https://www.w3schools.com/html/html5_intro.asp. It doesn't at all handle any logic like JS would, if that's what you are asking. Same can almost go for CSS. It's a description language, it doesn't handle any logic (except for select queries). However, CSS is starting to implement variables, but you can only use those for *attributes*. Not write a fully functional app with CSS alone. Andrew McRobb Full-time Software Developer Part-time Freelancer mcrobb.info On Thu, Jan 4, 2018 at 10:21 AM, der.hans wrote: > moin moin, > > I haven't paid much attention to HTML and CSS standards for many years. > > As I understand it, HTML5 is script-like to lesson use of javascript. > > Does that mean plain HTML ( no javascript ) is sufficient to exploit > browsers in light of #meltdown and #spectre ? > > https://blog.mozilla.org/security/2018/01/03/mitigations- > landing-new-class-timing-attack/ > > https://sites.google.com/a/chromium.org/dev/Home/chromium-security/ssca > > What about CSS? > > ciao, > > der.hans > -- > # https://www.LuftHans.com https://www.PhxLinux.org > # As we enjoy great Advantages from the > # Inventions of others we should be glad of an > # Opportunity to serve others by any Invention of ours, > # and this we should do freely and generously. > # -- Benjamin Franklin (1706-1790), on his refusal to patent his > inventions. > --------------------------------------------------- > PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org > To subscribe, unsubscribe, or to change your mail settings: > http://lists.phxlinux.org/mailman/listinfo/plug-discuss --089e0826f81c8b58b70561f93b24 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
No, HTML5 is a markup at the end of the day. Comparin= g JS and HTML, is like comparing apples to oranges. All HTML5 does is inclu= de new tags to use when building a web app for you or search engines to use= : https://www.w3= schools.com/html/html5_intro.asp. It doesn't at all handle any logi= c like JS would, if that's what you are asking.

Same can a= lmost go for CSS. It's a description language, it doesn't handle an= y logic (except for select queries). However, CSS is starting to implement = variables, but you can only use those for attributes. Not write a fu= lly functional app with CSS alone.

Andrew McRobb
Full-time Software = Developer
Part-tim= e Freelancer

On Thu, Jan 4, 2018 at 10:21 AM, der.hans <PLUGd@lufthans.com> wrote:
moin moin,

I haven't paid much attention to HTML and CSS standards for many years.=

As I understand it, HTML5 is script-like to lesson use of javascript.

Does that mean plain HTML ( no javascript ) is sufficient to exploit
browsers in light of #meltdown and #spectre ?

https://blo= g.mozilla.org/security/2018/01/03/mitigations-landing-new-class-t= iming-attack/

https://sites.google.com/a/ch= romium.org/dev/Home/chromium-security/ssca

What about CSS?

ciao,

der.hans
--
#=C2=A0 https://www.LuftHans.com=C2=A0 =C2=A0https://www.PhxLinux.org=
#=C2=A0 As we enjoy great Advantages from the
#=C2=A0 Inventions of others we should be glad of an
#=C2=A0 Opportunity to serve others by any Invention of ours,
#=C2=A0 and this we should do freely and generously.
#=C2=A0 -- Benjamin Franklin (1706-1790), on his refusal to patent his inve= ntions.
---------------------------------------------------
PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org
To subscribe, unsubscribe, or to change your mail settings:
http://lists.phxlinux.org/mailman/listin= fo/plug-discuss

--089e0826f81c8b58b70561f93b24-- --===============1905335860854563897== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tClBMVUct ZGlzY3VzcyBtYWlsaW5nIGxpc3QgLSBQTFVHLWRpc2N1c3NAbGlzdHMucGh4bGludXgub3JnClRv IHN1YnNjcmliZSwgdW5zdWJzY3JpYmUsIG9yIHRvIGNoYW5nZSB5b3VyIG1haWwgc2V0dGluZ3M6 Cmh0dHA6Ly9saXN0cy5waHhsaW51eC5vcmcvbWFpbG1hbi9saXN0aW5mby9wbHVnLWRpc2N1c3M= --===============1905335860854563897==--