Ask HN: Can Jasmine Unit Tests Expose Security Vulnerabilities on Server?

Re:Ask HN: Can Jasmine Unit Tests Expose Security Vulnerabil... by staunch on Wednesday February 12, 2014 @07:13PM (#7228450)

You shouldn't be unit testing on production. You should run as little as possible in prod.

[ Parent | on HN ]

Re:Ask HN: Can Jasmine Unit Tests Expose Security Vulnerabil... by jbrowne on Wednesday February 12, 2014 @08:44PM (#7228805)

Thanks for responding staunch! Is that mainly to avoid performance costs/clutter, or for security reasons or both?

[ Parent | on HN ]

Re:Ask HN: Can Jasmine Unit Tests Expose Security Vulnerabil... by staunch on Thursday February 13, 2014 @01:10PM (#7232967)

You're increasing risk for little benefit. A Javascript unit testing framework could likely be used for crafting XSS exploits. Or it could end up slowing down real users when you forget to turn it off (or whatever). Probably nothing bad will happen but it's a needless risk and a bad practice.

[ Parent | on HN ]

Re:Ask HN: Can Jasmine Unit Tests Expose Security Vulnerabil... by jbrowne on Thursday February 13, 2014 @02:02PM (#7233410)

Ok, got it - makes sense. Thanks for the input staunch, much appreciated.

[ Parent | on HN ]