Even JavaScript doesn't misbehave when a semicolon is missing. What the hell does CSS think of itself?

Our website once had it’s config file (“old” .cgi app) open and available if you knew the file name. It was ‘obfuscated’ with the file name “Name of the cgi executable”.txt. So browsing, browsing.cgi, config file was browsing.txt.
After discovering the sql server admin password in plain text and reporting it to the VP, he called a meeting.
VP: “I have a report that you are storing the server admin password in plain text.”
WebMgr: “No, that is not correct.”
Me: “Um, yes it is, or we wouldn’t be here.”
WebMgr: “It’s not a network server administrator, it’s SQL Server’s SA account. Completely secure since that login has no access to the network.”
<VP looks over at me>
VP: “Oh..I was not told *that* detail.”
Me: “Um, that doesn’t matter, we shouldn’t have any login password in plain text, anywhere. Besides, the SA account has full access to the entire database. Someone could drop tables, get customer data, even access credit card data.”
WebMgr: “You are blowing all this out of proportion. There is no way anyone could do that.”
Me: “Uh, two weeks ago I discovered the catalog page was sending raw SQL from javascript. All anyone had to do was inject a semicolon and add whatever they wanted.”
WebMgr: “Who would do that? They would have to know a lot about our systems in order to do any real damage.”
VP: “Yes, it would have to be someone in our department looking to do some damage.”
<both the VP and WebMgr look at me>
Me: “Open your browser and search on SQL Injection.”
<VP searches on SQL Injection..few seconds pass>
VP: “Oh my, this is disturbing. I did not know SQL injection was such a problem. I want all SQL removed from javascript and passwords removed from the text files.”
WebMgr: “Our team is already removing the SQL, but our apps need to read the SQL server login and password from a config file. I don’t know why this is such a big deal. The file is read-only and protected by IIS. You can’t even read it from a browser.”
VP: “Well, if it’s secured, I suppose it is OK.”
Me: “Open your browser and navigate to … browse.txt”
VP: “Oh my, there it is.”
WebMgr: “You can only see it because your laptop had administrative privileges. Anyone outside our network cannot access the file.”
VP: “OK, that makes sense. As long as IIS is securing the file …”
Me: “No..no..no.. I can’t believe this. The screen shot I sent yesterday was from my home laptop showing the file is publicly available.”
WebMgr: “But you are probably an admin on the laptop.”
<couple of awkward seconds of silence…then the light comes on>
VP: “OK, I’m stopping this meeting. I want all admin users and passwords removed from the site by the end of the day.”

Took a little longer than a day, but after reviewing what the web team changed:
- They did remove the SQL Server SA account, but replaced it with another account with full admin privileges.
- Replaced the “App Name”.txt with centrally located config file at C:\Inetpub\wwwroot\config.txt (hard-coded in the app)
When I brought this up again with my manager..
Mgr: “Yea, I know, it sucks. WebMgr showed the VP the config file was not accessible by the web site and it wasn’t using the SA password. He was satisfied by that. Web site is looking to beat projections again by 15%, so WebMgr told the other VPs that another disruption from a developer could jeopardize the quarterly numbers. I’d keep my head down for a while.”

Fuck it, I am not going to use any semicolon in my next javascript project.

"Why am I a horrible person for following standard linting and thus not using semicolon in my JavaScript code?"

Next rant

"Sometimes I think people who don't use semicola in JavaScript should be shot on the spot."

Lol, love you devrant

Replace a semicolon (;) with a greek question mark (;) in your friend's JavaScript and watch them pull their hair out over the syntax error. #maxTroll

Something that really annoys me is when people abuse the lax semicolon rules in JavaScript. Personally I believe semicolons should be a standard and always used in a language like JavaScript, and while the loose rule on semicolons may be considered convenient when one is forgotten every now and then, it is /not/ meant to be abused and semicolons completely unused. It's particularly annoying when I have to work on a group repo at work and the standard is to not use semicolons. JavaScript to me is much more similar to a C style language than something like Python, so even though the language is built to be loose and easy conventions such as bracket scoping and semicolons should be kept and practiced.

Best Programmer's Breakup:
* me * used to code in Javascript and PHP
* Girl * Also a Programmer

Me: You are a semicolon to my code.
Girl: Awwwwwww.. That's so sweet.
Me: * Trying to breakup * I recently switched to Python and want to use only a single language now.

* It Works! *

P.S.: Still use all three Languages ❤

Let’s play a programmer game. Every time you see a missing semicolon in JavaScript take a shot of coffee.

Why am I a horrible person for following standard linting and thus not using semicolon in my JavaScript code? I write Golang and Elixir which they don't have them and thus it is for me more natural to not have them in JS as well.

Well all thanks to JavaScript . The problem of the century was gone i.e missing semicolon . And still I see people put semicolon:true in eslint ... well what's the point of removing it in the first place then .

My Friend(On getting an error in Javascript for not placing a semi-colon";") : If the computer knows that adding the semicolon would fix the code why would it not add it by itself instead of throwing an error.

Me: Because coaches don't play ;)