Venia Silente

Maybe instead of removing the RCE, we can lock down the sandbox better and reduce the amount of information advertisers can collect.

By all means but then someone do it, because it’s 2025 and even Firefox sends all this information that is absolutely not needed to show a webpage. It’s at least 25 years late by this point.

If you remove code execution in the browser, then many websites will need to ship desktop apps instead.

Which in quite more than just some cases would be good, precisely because some things should be native programs instead of requiring that the web browser basically provides all the tasks of the OS.

Just because there are other ways to serve you ads does not at all mean we should not be able to not only stop at least one, but also the one which is most dangerous since it literally allows for RCE on all clients. by design.

JavaScript is needed to actually build anything useful.

Underage user detected!

Yes.

It’s impressive that for a technology that’s supposed to be better than Mastodon (bloated) or Reddit (ass-corporate), Lemmy still relies on the same basic evils.

the website wouldn’t need to embed any JS code.

That’s the point.