The exact statement that was provided in Security Report was:
Now, a very Standard custom WebLink we have is on a List view, where we use GETRECORDIDS() of selected records and prepare a redirect URL and open a VF page.
So does that mean, Salesforce is completely closing the platform for JS based Buttons? I thought this was always an optional thing, I know JS based WebLinks/Buttons are not supported for Lightning, but what if an App is not built for Lightning, but is for Classic Aloha interface?
I'm all puzzled, because this piece of information that Buttons with JS will be causing Security Review problems in any documentation ...