Hacker News Reader

Comment by seanwilson | Hacker News Reader

Unfortunately no but would love to be proved wrong. You can inline them server-side but then they're not cacheable. There's SVG filters but they're not widely supported yet. I'm curious of the reason why this is so difficult actually (security?). What's wrong with using JS?

View on HN

I already use svg sprites https://css-tricks.com/svg-sprites-use-better-icon-fonts/

I block it by default, so that wouldn't work. I would love to make web pages that I myself could read/see if they were made by someone else.

Fair enough. There's so much JS only functionality now though that I can't see how you can avoid it when developing a complex website. You find you can do the majority of things you want online with JS disabled?

Not all websites are complex though. There should be little need to use scripts on a simple blog, for example, but I've seen way too many times that you'll end up with a blank screen without scripts, even though the text is already there in the DOM.

Consider a middle ground. Check out uMatrix, it allows you to block third-party js by default while allowing js from same site as well as making it simple to permanently allow selected domains for one or all others.

I already use uMatrix, but why should I trust 1st party scripts. I regularly visit less-trusted sites or sites that I never visited before, and I wouldn't want them to be able to just execute Turing-complete scripts with access to potentially a lot of information on me (only just the browsing history would be a lot) on my machine or that can trivially fingerprint me.

Reply on news.ycombinator.com