New Date("WTF") – How well do you know JavaScript's Date class?

Re:New Date("WTF") – How well do you know JavaScript's Date ... by giantrobot on Saturday July 12, 2025 @12:22PM (#44543091)

You still need to do some validation of the input because it's difficult to impossible (in many cases) to be absolutely sure the input you receive only comes from your validated form. Even code running entirely within the browser can receive broken/malicious input from an extension, user script, or even the host OS.

It can be a bit belt and suspenders doing validation of specific forms but shit happens. It's much better to catch stuff before it's persisted on the back end or on disk.

[ Parent | on HN ]

Re:New Date("WTF") – How well do you know JavaScript's Date ... by lukan on Saturday July 12, 2025 @05:59PM (#44545555)

That's why I wrote, "validated"

And there can also be man in the middle attacks or whatever, the efforts you do for validation depends still on your task at hand. How critical an error would be.

But even for the most trivial tasks I would never think of passing some user strings to Date and expect to get a valid value.

[ Parent | on HN ]