Do Blog Feeds carry a security risk?
C|Net has an article claiming that: Blog feeds may carry security risk.
Personally I think this is a bit alarmist. I’ve not done a count, but I think most aggregators don’t execute Javascript encountered in RSS Feeds. In fact the quality of the HTML found in RSS is so bad that I think most of us do some major scrubbing and cleaning to get it to be meaningful.
BlogBridge does not process Javascript and thus is not vulnerable to this attack. I bet this is true of many if not most of our esteemed competitors.
In general though I think it’s much more likely that malicious Javascript affects pages displayed in the Web Browser, so the focus correctly should remain there.
