Hacker News new | ask | show | jobs
by jbrowne 4507 days ago
Thanks for responding staunch! Is that mainly to avoid performance costs/clutter, or for security reasons or both?
1 comments

You're increasing risk for little benefit. A Javascript unit testing framework could likely be used for crafting XSS exploits. Or it could end up slowing down real users when you forget to turn it off (or whatever). Probably nothing bad will happen but it's a needless risk and a bad practice.
Ok, got it - makes sense. Thanks for the input staunch, much appreciated.