Aaron Held wrote:
> So instead of processing the return xml file, building javascript 
> objects and coding a result you just call the 

As nifty as this might seem, JavaScript is IMHO the bane of poor web
design.  JavaScript is meant for eye-candy, and should only be used in
that manner.  We all know that the behavior of JavaScript is not
standardized, and depending on the browser or user preferences,
JavaScript will not behave in the same manner and may not even exist.

How many sites have you visited in the past and present that are IE-only
or Mozilla-only.  Far fewer of the latter than the former, but generally
speaking, JavaScript limits the usefulness of any website.

With that in mind as a note of caution, please consider maintaining
functionality for basic web browsers and those people who do not allow
JavaScript to run for security reasons (like myself).  Program to the
least-common denominator.

Another note of caution: NEVER trust the client.  IOW, ALWAYS validate
the client response and be aware of the impact of passing values to
method calls.  A common mistake is to use JavaScript to validate forms
before submission, and to trust that data as "clean".  JavaScript is a
nice convenience for the user, but that is all.  The data you receive
at the server could have easily been custom scripted to exploit your
application.  Without validation and filtering, your app could be open
to all kinds of nasties.

Sorry about the preachiness, but JavaScript is one of my largest
pet-peeves.  It can be used to create some neat web-effects and
conveniences, but it's just not safe to rely upon.

-- 
Chad Walstrom <[EMAIL PROTECTED]>           http://www.wookimus.net/
           assert(expired(knowledge)); /* core dump */


-------------------------------------------------------
This SF.net email is sponsored by: Etnus, makers of TotalView, The debugger 
for complex code. Debugging C/C++ programs can leave you feeling lost and 
disoriented. TotalView can help you find your way. Available on major UNIX 
and Linux platforms. Try it free. www.etnus.com
_______________________________________________
Webware-discuss mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/webware-discuss

Reply via email to