Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Remove django.js from requirements #15

Open
BertrandBordage opened this issue Jan 19, 2014 · 0 comments
Open

Remove django.js from requirements #15

BertrandBordage opened this issue Jan 19, 2014 · 0 comments

Comments

@BertrandBordage
Copy link

Why is django.js a mandatory requirement for django-eztable?

As far as I know, we can use {% url %} template tags instead. I use django-eztables on two websites and none of them use django.js.

I see four reasons why the template tag is better than django.js:

  • less dependencies;
  • less code to download and execute for the client;
  • the template tag explicitly raises an exception when the view can't be found;
  • to me, django.js is a security flaw: allowing clients to reverse urls, access user permissions, and fetch CSRF tokens seems quite hazardous.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant