HTML5 as JS

[der.hans]

moin moin,

I haven't paid much attention to HTML and CSS standards for many years.

As I understand it, HTML5 is script-like to lesson use of javascript.

Does that mean plain HTML ( no javascript ) is sufficient to exploit
browsers in light of #meltdown and #spectre ?

https://blog.mozilla.org/security/2018/01/03/mitigations-landing-new-class-timing-attack/

https://sites.google.com/a/chromium.org/dev/Home/chromium-security/ssca

What about CSS?

ciao,

der.hans
-- 
#  https://www.LuftHans.com   https://www.PhxLinux.org
#  As we enjoy great Advantages from the
#  Inventions of others we should be glad of an
#  Opportunity to serve others by any Invention of ours,
#  and this we should do freely and generously.
#  -- Benjamin Franklin (1706-1790), on his refusal to patent his inventions.