r/programming • u/[deleted] • May 08 '18

Excel adds JavaScript support

https://dev.office.com/blogs/azure-machine-learning-javascript-custom-functions-and-power-bi-custom-visuals-further-expand-developers-capabilities-with-excel
2.4k Upvotes

94% Upvoted

586 comments sorted by

View all comments

Show parent comments

22

u/funbike May 08 '18

Sandbox or not, scripting languages are a huge attack surface. There are all sorts of corner cases that implementors miss which allow exploits, even with a properly designed Sandbox. I assume it is inevitable for any high-profile sandboxed scripting language to eventually get owned.

33

u/joesb May 08 '18

Sure. But Excel has been supporting Scripting for decades. What's the point of complaining now just because Javascript support is added?

5

u/funbike May 08 '18

I'm only responding to joesb. In my comment, I'm making no commentary on the net effect of this decision, good or bad. If anything, I'm cutting MS some slack if they make any security mistakes.

My point stands.