dhis2-devs team mailing list archive

[Hieu Dang Duy <hieu.hispvietnam@xxxxxxxxx>]

Dear Saptarshi,

I'm not good at about security, I also knew that using javascript it's
really not safe in web application. By the way, I have a small idea about
this issue that. Not surely, have any configuration/setting about date in
DHIS2 program ? Unless, I think we can make a new setting for this one.
I meant we should make a pattern setting for date format, ie. yyyy-mm-dd for
DataEntry module. Or can be expanding to use for our whole system.

In that case, we can easily use any kind of validations with that pattern
setting in either client-side (javascript) or server-side (java).

Thanks for your suggestion !

p.s: STQC - What's its mean ?

On Tue, Dec 22, 2009 at 9:04 PM, Saptarshi Purkayastha <sunbiz@xxxxxxxxx>wrote:

> I dont think it is good to validate through javascript unless it is a
> very simple thing and not really data saving related.
>
> In DHIS2, we have this clientside validation without any server
> validation. The STQC guys have found only few, but as a pattern we
> lack that in our design. Im sure the security testing guys are going 2
> find more bugs with validation.
>
> So i suggest unless its a UI thing we should avoid javascript validation.
>
> --
> Sent from my mobile device
>
> ---
> Regards,
> Saptarshi PURKAYASTHA
> Director R & D, HISP India
> Health Information Systems Programme
>
> My Tech Blog:  http://sunnytalkstech.blogspot.com
> You Live by CHOICE, Not by CHANCE
>
> _______________________________________________
> Mailing list: https://launchpad.net/~dhis2-devs<https://launchpad.net/%7Edhis2-devs>
> Post to     : dhis2-devs@xxxxxxxxxxxxxxxxxxx
> Unsubscribe : https://launchpad.net/~dhis2-devs<https://launchpad.net/%7Edhis2-devs>
> More help   : https://help.launchpad.net/ListHelp
>



-- 
Hieu.HISPVietnam
Good Health !