Re: Javascript and Mantis

On Mon, 2007-10-29 at 08:42 -0700, James Frasca wrote:
> Rather than re-writing the form code, this would be a perfect place to
> add some javascript to validate the form. It is a circumstance that
> would ease the user experience, but isn't required for the application
> to function.

As long as you also continue to validate the form input on the server
side as well. Just because a form has client-side validation doesn't
mean I can't pass bad values to the form and submit it to the server
(i.e. SQL injection, xSS exploits, etc.)

The issue with hitting the Back button and having it erase the form, is
just due to improper use of the form construction itself. That can be
fixed without having client-side Javascript attempt to validate the
form's values.


-- 
David A. Desrosiers
desrod-PoZ5/QCWMfb/2OF+hy8yCA@xxxxxxxxxxxxxxxx
setuid-Re5JQEeQqe8AvxtiuMwx3w@xxxxxxxxxxxxxxxx
http://projects.plkr.org/
Skype...: 860-967-3820


-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/