On: Intel CPUs afflicted with simple data-spewing spec-exec vulnerability

[gambler]

Browsing without JS is a major pain if you're enabling it for only certain domains. If you don't do that, you don't add much security anyway.

[jakeogh → gambler]

It's per-process. Under most circumstances, each surf window/tab is it's own WebKit process. So for example, I might decide to enable it for a banking session (although it's a perfect example of somewhere JS should not be necessary).