Loading ...
Sorry, an error occurred while loading the content.

Re: [jslint] JSLint and HTML

  • Mark Volkmann
    Mar 15, 2013 Expand Messages
    View Source
    • 0 Attachment
      Hmm. I'm not happy about that. I sometimes use JSLint to check HTML and CSS
      files. It seems to do a good job at both.

      On Fri, Mar 15, 2013 at 5:01 PM, douglascrockford <douglas@...>wrote:

      > **
      > When I began JSLint in 2001, the usual practice in web applications was to
      > include inline scripts and event handlers in HTML. So JSLint includes an
      > HTML parser so that it can locate and inspect the embedded scripts.
      > Since then, we have determined that embedding JavaScript in an HTML file
      > is a very bad practice. It is bad from a performance standpoint because
      > gzip and caching are not possible. It is bad from a security standpoint
      > because of the XSS hazard. CSP cannot be effective unless you strictly
      > follow the good practice of segregating scripts.
      > Since the purpose of JSLint is to promote good practice, I will be
      > removing JSLint's HTML parser.

      R. Mark Volkmann
      Object Computing, Inc.

      [Non-text portions of this message have been removed]
    • Show all 13 messages in this topic