Re: [jslint] JSLint and HTML
- Mar 15, 2013 Expand MessagesView SourceHmm. I'm not happy about that. I sometimes use JSLint to check HTML and CSS
files. It seems to do a good job at both.
On Fri, Mar 15, 2013 at 5:01 PM, douglascrockford <douglas@...>wrote:
> When I began JSLint in 2001, the usual practice in web applications was to
> include inline scripts and event handlers in HTML. So JSLint includes an
> HTML parser so that it can locate and inspect the embedded scripts.
> is a very bad practice. It is bad from a performance standpoint because
> gzip and caching are not possible. It is bad from a security standpoint
> because of the XSS hazard. CSP cannot be effective unless you strictly
> follow the good practice of segregating scripts.
> Since the purpose of JSLint is to promote good practice, I will be
> removing JSLint's HTML parser.
R. Mark Volkmann
Object Computing, Inc.
[Non-text portions of this message have been removed]