In a significant update for users of Windows 11, Microsoft has announced that starting with version 24H2, the JScript9Legacy engine will be enabled by default for all scripting processes that previously relied on the classic JScript engine. This change, shared by Naveen Shankar, Program Manager at Microsoft, underscores the company’s commitment to enhancing security while ensuring a seamless transition for users.
The introduction of JScript9Legacy marks a pivotal moment in the evolution of scripting within the Windows platform. Designed with modern web standards and stringent security principles in mind, this new engine offers improved protection against prevalent threats such as cross-site scripting (XSS) and other web-based attacks. The performance enhancements over the original engine are noteworthy, as the transition from jscript.dll to jscript9legacy.dll allows the operating system to better defend against a variety of security risks.
Shankar reassures users that no action is required on their part; existing script tasks will continue to operate normally, and workflows will remain unchanged. In the rare event of compatibility issues, organizations can access support through Microsoft’s Services Hub, allowing for a temporary reversion to the previous engine if necessary.
This transition signifies the formal retirement of JScript, which has been a component of Windows since 1996. Originally, it served as Microsoft’s implementation of ECMAScript, gaining popularity through its use in Internet Explorer and as a tool for automating tasks within Windows. However, in today’s landscape, JScript is increasingly viewed as outdated, failing to meet contemporary JavaScript security standards and becoming a target for vulnerabilities, including memory corruption and arbitrary code execution via malicious documents or emails.
No reason for further support
Microsoft has maintained JScript until now primarily for backward compatibility. However, with the official retirement of Internet Explorer and the widespread adoption of the Edge browser, the company has determined that there is no longer a justification for supporting the legacy engine. JScript9Legacy not only enhances security but also offers greater flexibility in deployment, both within and outside the browser context.
This update is applicable solely to Windows 11 version 24H2 and subsequent versions, while older Windows iterations will continue utilizing the original JScript engine. Through this initiative, Microsoft reinforces its focus on security, balancing the need for modern protection against threats with the necessity of supporting existing applications. Shankar emphasizes that JScript9Legacy provides a harmonious blend of enhanced security and continued support for legacy scripts.
