Re: Condition to link to javascript code?

[Davis Herring]

> If it's a choice between linking to klipse.js on the same server
> and linking to klipse.js on the Google server, I see no particular
> ethical reason to prefer one or the other.

Are you concerned about the XSS possibilities if the other host (Google 
in this case) decided to change the JavaScript served at the well-known 
address to take advantage of its inclusion in a webpage with a security 
context?

Certainly the use of "standard" JavaScript libraries loaded from foreign 
servers is commonplace, but I think the security concern is at least 
worth considering (unless I completely misunderstand it).

Davis

--
This product is sold by volume, not by mass.  If it appears too dense or 
too sparse, it is because mass-energy conversion has occurred during 
shipping.