HNHacker News
TopNewBestAskShowJobs

jbrowne

4 karma · joined October 10, 2011

submissionscomments
jbrowne··on Ask HN: Can Jasmine Unit Tests Expose Security Vulnerabilities on Server?
That all stands to reason, thanks for the input wpietri.
jbrowne··on Ask HN: Can Jasmine Unit Tests Expose Security Vulnerabilities on Server?
Ok, got it - makes sense. Thanks for the input staunch, much appreciated.
jbrowne··on Ask HN: Can Jasmine Unit Tests Expose Security Vulnerabilities on Server?
Thanks barylen for the response! Totally get what you're saying, could you expand a bit on why?
jbrowne··on Ask HN: Can Jasmine Unit Tests Expose Security Vulnerabilities on Server?
Thanks for responding staunch! Is that mainly to avoid performance costs/clutter, or for security reasons or both?
jbrowne··on Ask HN: Can Jasmine Unit Tests Expose Security Vulnerabilities on Server?
Got it - thanks!
jbrowne··on Ask HN: Can Jasmine Unit Tests Expose Security Vulnerabilities on Server?
Thanks for responding - that's my understanding too. Though if there's something I'm not aware of, I'd love to know!

Thanks for raising the trash data issue. The framework does a pretty good job of set up and tear down before and after each test is run, so I'm not too concerned about the trash data as it's destroyed once the test has completed. (If I'm understanding your point correctly?)

jbrowne··on Ask HN: Can Jasmine Unit Tests Expose Security Vulnerabilities on Server?
Thanks for responding! Currently running Jasmine on local dev box, yes that's cool, sysadmin not concerned about that.

We don't have CI server. We have a dev server that is currently exposed to the world, our production server is separate. If Jasmine installed on the dev server a SpecRunner.html that triggers the unit tests on that dev server could be accessed by anyone if they knew the url.

This is what the sysadmin is concerned about. Would you say it's best to either 1. just run the unit tests locally as we don't have CI server set up or 2. Hide our dev server from the outside world and then it would be ok to run the unit tests on it?

Hope that helps to clarify?