[ Go to January 1997 Table of Contents ]

Java leak

The sidebar "JavaScript Forms" by David W. Boles ("Form-idable Function," October) is yet another example of people getting too caught up in the hype of Java and JavaScript. Password validation is the last thing JavaScript should be used for, especially where the password is included in the script itself. Anyone can view the source of the document and obtain the password. Using JavaScript to protect a Web site is analogous to locking your car doors but leaving your windows down.

Jason E. Melton

via the Internet

Editor's Reply: You're right, security isn't one of JavaScript's strong points. Our example showed the basic flavor of how JavaScript works, but shouldn't be used as an actual application. For some real JavaScript apps, check out our JavaScript Resource Center at http://www.winmag.com/web.

Copyright 1997 CMP Media Inc.

(From Windows Magazine, January 1997, page 52.)