Javascript on webpage

[chess]

I want to setup a small system for users to upload and host html files on my hosting.

There would obviously be a security issue if i allowed the use of php, but would there be an issue if i allowed javascript to be used on pages?




I am only going to allow access to my friends, so this really isnt an issue, just interested to know whether it is a security issue.

[stymiee]

Since JavaScript is only executed in the web browser you should be just fine.

[chess]

are cookies and recreating sessions considered a risk??
("considered a risk", as in, is it of concern. Is the recreation of sessions something as hard to do as brute forcing a password, or is it something that can be easily done by someone who knows how to do so?)