[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Security concerns with minified javascript code



 ❦ 28 août 2015 10:32 +0100, Neil Williams <codehelp@debian.org> :

> I still find it hard to believe that *so* much code is required to
> minify JS. The excuse that JS is "moving fast" is nonsense. The reality
> would appear to be that nobody actually *cares* about the mess, they
> just use it.

It's a feature. The JS community is quite proud to have so many packages
for so little tiny tasks. Their packaging system enables to do this
"easily".

> Why isn't there a KISS tool to do this? Is it all just special
> snowflake optimisations for what has to be / should be a simple process
> of removing whitespace and collapsing the formatting?

uglifyjs is a KISS tool to minify. Unfortunately, many projects do not
require only minification. They require transpiling (convert from ES6 to
ES5 or from CoffeeScript/Typescript/... to vanilla JS) and dependency
handling (through loaders). And this is becoming more and more common
because people want to use ES6 or some more modern JS.
-- 
Use the fundamental control flow constructs.
            - The Elements of Programming Style (Kernighan & Plauger)

Attachment: signature.asc
Description: PGP signature


Reply to: