That's a non-problem because people who care about online security don't have Ja...

IgorPartola · on March 1, 2014

OK what if the attacker replaces the action of the form to submit to their servers instead?

Also Pandora does not work without JavaScript just like most modern websites. Would be pointless to sign up then, wouldn't it.

Lastly, what you are saying is simply not true.

barrkel · on March 1, 2014

Security isn't binary.

nilved · on March 2, 2014

Suffice to say: anybody who has JavaScript enabled by default demonstratably does not care about their security. Interest and competence in security is indeed a spectrum, but somebody in first grade math still knows what 2 + 2 is.