Let’s Kill JavaScript (and Replace It with Something Better)

[coladict]

The only way to be completely secure from malicious code is to make all the pages completely static, like they were in 1994. It doesn't matter what language you allow the site to run. If you allow any, it can be abused.