Web security vulnerabilities and Javascript

Your quote of the article pointed out a typo, thanks!

> "It is difficult problem, as website owners need to be able to call out to 
> advertisers' Javascript,"
>
> Why?  Just because the advertisers demand it?  It certainly doesn't seem 
> to me to be a necessary aspect of web advertising.

s/difficult/a difficult/

Anything that needs to play with the DOM to get their ad content into the site (Google ads for
example) needs to use Javascript.  Site owners don't want to synchronously retrieve that
content (network problems could cause their site to load slowly or not at all).  Because of
the same-site restriction for Javascript, the site owner can't host the Javascript either.

jake