4 ms·
From the article: > the reason why JavaScript development is so complicated: > web development itself is inherently complicated. It's really sad to me tha
by combatentropy 10y ago
From the article:
> the reason why JavaScript development is so complicated:
> web development itself is inherently complicated.
It's really sad to me that the writer cites necessity as the reason for complexity.
> We are trying to build applications that run right in a dozen browsers
I remember cross-browser CSS and JavaScript from 2005 as infinitessimally shorter, and that was when we had to contend with IE 6. All of the other browsers back then behaved fairly uniformly. Now, IE 11 is almost indistinguishable from the rest.
> look good on thousands of different devices
There are really just two devices: big screen, little screen. To think you're targeting "thousands of different devices," you must be counting every make and model as a "different device" (and even then, it's more like dozens). Tell me, how does targeting the Samsung Galaxy S3 and the iPhone 6 require a bunch of JavaScript dependencies?
> load fast enough for impatient commuters in the subway
This is an art we have lost. The web used to ride on 28.8 kbps.
> and are still accessible enough that blind people can use them.
That also has been a solved problem for well over a decade.
> The Cambrian explosion of tools you see around you
> is what rapid progress looks like when it’s not
> controlled by an Apple or a Microsoft.
The web was never controlled by Apple. At one time it was dominated by Microsoft, but even then I could write cross-browser JavaScript without really thinking about it, with jQuery (2006).
> At the same time, web developers are closing security
> vulnerabilities all over the place.
What other security hole is there for web devs to handle besides cross-site scripting, and how does any security hardening lead to magnitudinous JavaScript dependencies?
> If this evolutionary process frustrates you [...]
Is this evolution or entropy?
- carsongross 10y agoWhat other security hole is there for web devs to handle Ironically, as we introduce more expressive power in the browser (an untrusted execution environment) to support SPAs, we are actually introducing more security issues: http://intercoolerjs.org/2016/02/17/api-churn-vs-security.html http://intercoolerjs.org/2016/02/17/api-churn-vs-security.ht... These are the crazy years.
- ben_jones 10y ago> what other security vulnerabilities for Web devs to handle besides csrf Not defending the article but the more intertwined the client and server code becomes, as well as server side development in nodejs etc , the more security vulns javascript developers will be exposed to. In addition nodejs has become arguably THE introductory web development language and as such offloads many complex but necessary tasks to its third party libraries in order for beginners to develop efficiently. This means security features ranging from CSRF to ORMS to CORS etc are taken out of the domain of developers and into that of typically un vetted third party libraries, becoming a vulnerability in and of itself.
- extrapickles 10y agoThe advantage of CSRF/CORS/etc being taken care of by third party libraries is that it will be actually handled (even if its very basic) in sites created by beginners, which is better than not having it at all.
- irrational 10y agoThanks combatentropy. Maybe the OP hasn't been around as long as we have and doesn't have the background to understand.