In the well-established Office Ready-Fire-Aim tradition, Microsoft adds two new “features” that beg to be abused. Details appeared at Build, and the bad guys already have their keyboards primed.

Right now, JavaScript in Excel custom functions is only supported in the Developer Preview edition to Office 365 subscribers enrolled in the Office Insiders program. But it seems inevitable that in ...

Also, if you try to execute a JavaScript function in an Excel spreadsheet connected to an external server, permission to connect is requested, so it seems to prevent the execution of illegal code.

Depending on the configuration of your Web browser, either (1) you'll be prompted to save the file to your disk (do so), or (2) your copy of Excel will automatically run and KStat will be loaded into ...