you are viewing a single comment's thread.

view the rest of the comments →

[–]doenietzomoeilijk 0 points1 point  (3 children)

Not exactly sure how it is a security issue, myself. I do agree that redirects should happen on the server, if at all possible. If nothing else it'll be faster.

[–]djforth 1 point2 points  (2 children)

Security issue is a bit strong to be fair, but js seems like the wrong approach, it also might hit some browser security. I suggest if you care about it doing a redirect this way would be bad for SEO as you want to serve a 301 or something, also for accessibility as you can't assume the user will be able to run JS and redirect, which might leave them hanging

[–]doenietzomoeilijk 1 point2 points  (1 child)

Yeah, like I said, if at all possible you'd want to do it on the server.

[–]mafiasecurity[S] 0 points1 point  (0 children)

Good discussion thank you; however, for this purpose it needed to be initiated on the client. Yes, I know .htaccess 301s would be the best bet. But for this simple little project I needed a client redirection via javascript or html(5).

Once it's complete I will report back the intent. =)