[ 3 posts ]

Daniel Winz

  • Username: dwinz
  • Joined: Wed Jun 13, 2012 2:07 am
  • Posts: 1
  • Offline
  • Profile
Tags:

YUI function validity

Post Posted: Wed Jun 13, 2012 2:47 am
+0-
Hello,

I am totally new at YUI and javascript at all. But anyway I have to write a proof of concept to decide which library may be the best for my company.

Refering to http://en.wikipedia.org/wiki/Comparison ... frameworks YUI is very interesting as it delivers a lot of functionality. But I still have a question concerning security: How can I be sure that none of the YUI functions from the lib sends data to YAHOO or somewhere else?

I need some arguments for my boss.

Best regards,
Daniel

- Sorry if the question is crap from a point of view of an experienced programmer.

Dav Glass

  • Username: davglass
  • Joined: Thu Aug 28, 2008 9:28 am
  • Posts: 2088
  • Location: Marion, IL, US
  • Twitter: davglass
  • GitHub: davglass
  • Gists: davglass
  • IRC: davglass
  • Offline
  • Profile
Tags:

Re: YUI function validity

Post Posted: Wed Jun 13, 2012 5:30 am
+0-
Inspect the source all you want, there's nothing in there to cause any harm or do any logging at all:

https://github.com/yui/yui3

Nick Husher

YUI Contributor

  • Offline
  • Profile

Re: YUI function validity

Post Posted: Wed Jun 13, 2012 6:11 am
+0-
Note that when you include any external code in any project, you're opening the door for malicious code to be executed. This applies to backend libraries as much as javascript.

As Dav said, you're welcome to peruse the source code whenever you feel like. You could also run the YUI3 unit tests (which cover a large portion of the YUI codebase) and watch the wire and watch for any unusual requests.
  [ 3 posts ]
Display posts from previous:  Sort by  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum