使用注释来解释Javascript中的功能是否“安全”？

Question

Is it "safe" to put comments explaining the functions of the script in Javascript ? (Visible inside the public script)

Given that every users can read and modify the "Javascript", does the fact of using comments directly in the script could be dangerous ?

Because if I was a "hacker" and wanted to find an exploit, I think comments in the script explaining all the functions would make my life easier...

Answer 1

Skilled hackers don't need any comments.

You can never rely on anything on the client for security; all security boundaries must be verified on the server.

Answer 2

In my opinion, no ...it's not safe. It's really up to you and your specific situation. I bundle and minify personally, which removes those comments.

Answer 3

It depends on really what your program or script is designed to do. If it is a script that deals with secure information or data storage then the code itself should not be able to be modified by every user. Users designed to use the program should have access only to running the program.

Answer 4

您可以在javascript代码中添加所需的任何注释，但请确保将文件缩小（删除注释），并使不可缩小的文件不可访问

Answer 5

There is no expectation of your source code being secure client side. Anyone can view your html, css, and javascript files if they wanted to. Instead, focus on making sure that data flow is secure between client and server. For example, use https when dealing with passwords, credit card numbers, and other sensitive information.

Answer 6

You can add as much comments as you want. Adding a comment behind a function is not going to cause any trouble and will give you a better view on how you script works. I personally add comments to my scripts ofter, because then I can tell easier what the function does.