7 ms·
The regular expression pattern checking is pretty awesome. I'll disagree though where they say you don't need any more server side validations. You can easily
by abbyroad9191 13y ago
The regular expression pattern checking is pretty awesome. I'll disagree though where they say you don't need any more server side validations. You can easily remove / change the pattern value in the DOM. Which begs the question, what's the integrity of client-side testing if it cam be bypassed so easily?
- mrtksn 13y agoanything client-side is never about security or consistency since no matter what you do, anybody can always send you any data they want. client side validity checking is about the user experience, I mean if the user is doing something wrong you can guide them to the right direction without the need of server interaction and server interaction is always slower that one line of client side code.
- abbyroad9191 13y agoGood point about user experience. Are there any tools you use specifically to test ux that isn't manual?
- mrtksn 13y agosorry, I don't know such tools.
- saryant 13y agoYou can use Selenium. Second link is an example of using it within the Play Framework (scroll to the bottom of the page). [1] http://code.google.com/p/selenium/?redir=1 http://code.google.com/p/selenium/?redir=1 [2] http://www.playframework.com/documentation/2.1.1/ScalaFunctionalTest http://www.playframework.com/documentation/2.1.1/ScalaFuncti...
- daker 13y agoYes, you are right you really need the server-side part to prevent bad things.
- ownagefool 13y agoClient side validation is about UX and server load, not security.
- wavefunction 13y agoThe service/business tier should never trust the integrity of the front-end or the data it's sending. Bounds checking and validation on the server will never go away...