Is it possible to somehow disable the execution of JavaScript from the address bar? That is, requests of the form:

javascript:alert('Hello World!');

  • 1 question: why? - Alexey Shimansky
  • For example, to ban any dirty tricks. - Andrei
  • Which for example? Prohibit dirty tricks for whom? for yourself? Well, let the dude on his side do what he wants. What's the difference? - Alexey Shimansky
  • At least javascript:alert(document.cookie); , although there is an HTTPOnly flag. - Andrei
  • Well, then what? The user looked at his cookies. OK. well done. who did he hurt? - Alexey Shimansky

0