Jaqui Greenlees

With Network security auditors able to gain full admin access to University websites because they use a javascript based website, where the entire application logic is sent to the client browser, Why are website designers and developers insisting on using this SEVERE security risk technology? [ on one of the video sites such as youtube there is reportedly a video where this was done, in less than 3 minutes. ]

Every line of javascript is sent to the client browser, in human readable form. [ right-click, view source, there it all is ] There is not one valid reason to use any clientside scripting on a website. [ HEY!, Wordpress developers, that includes your blogging script!! NO TO JAVASCRIPT!! ]

My zero respect for any site that uses / requires javascript is no secret, I refuse to go to sites that do NOT function in lynx. I’m currently looking at the wordpress scripts used for this blog to remove the javascripts from it, I’ll check to see if I can implement the rss and pings with xslt instead of the AJAX they are commonly based on. If not, use a perl based cgi script to accomplish the task. [ this is asking for trouble, my perl is weak ]

Yes, I am posting this, as with all posts to this blog, with no javascript enabled in the browser.

This entry was posted on Tuesday, April 8th, 2008 at 11:56 am and is filed under Internet Security, Website Development, Website Security. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.