Hacker News Reader

For now

The difference between an enterprise device management feature and a web API are... pretty massive.

It doesn't seem particularly unreasonable that a company dealing with sensitive data would want to prevent their less computer-educated employees from falling for self-XSS attacks

https://en.wikipedia.org/wiki/Self-XSS

View source is completely disconnected from the developer tools, and poses no self-XSS danger.

The given reason to disable view source itself was "students are able to find Google Form Quiz answers in source code" which is pretty ridiculous.

Also something about getting past a really broken web filter.

Ah sorry, I was thinking it was the entire browser console.

Or maybe that was already an option to disable by admins before this

Seems pretty impossible to enforce otherwise with how the web currently works.

At some point the website is sending you HTML and JS to be interpreted on your computer.

Same as with the Telegram's DRM.

Reply on news.ycombinator.com