Blog

Rails Server Sent JavaScript Considered Harmful

Placeholder Avatar
Sebastian Porto
July 18, 2014

Rails provides a very convenient way of sending forms via AJAX using the Rails UJS helpers e.g.

html <%= form_for @articles, remote: true do |f| %> ... <% end %>

Then in your controller you can process that form and respond with Javascript:

js // app/views/articles/create.js.erb $("<%= escape_javascript(render @article) %>").appendTo("#article");

This makes for an impressive demo of the capabilities of Rails, but there are problems with it:

Hooking into the Lifecycle is Awkward

At some point you might want to do some client side validation or something else before sending the form. To do this you will need to hook into the lifecycle by doing something like:

js $('#new_account_form').on('ajax:before', function () { // do some validation // return false if not valid });

So now you have some JavaScript in the front-end and some in the server. This is of course harder to maintain than having the JavaScript in only one place.

They End up Doing too Much

Once you have some JavaScript returned by the server manipulating part of the page, it is just too easy to start doing too much in this response, for example start modifying elements outside the scope of the original element.

js // app/views/articles/create.js.erb $("<%= escape_javascript(render @article) %>").appendTo("#article"); $("#header .article-count").html(<%= Article.size %>); $("#footer .info").html("Last updated by");

In this example the returned JavaScript is doing way too much. Of course you can also do this kind of thing in the front-end, but at least the mess is in one place.

What to Do

I am going to be blunt and say that Rails UJS when combined with server sent JavaScript encourages bad design. They are good for small trivial things, but soon they get out of control. Some alternatives are:

Using Rails UJS but Without the Server Sent JavaScript

Rails remote is still useful, using it is easier than just plain DIY. You can hook into the lifecycle of remote calls and get html from the server, then insert that HTML yourself without having to send back JavaScript. e.g.

js $('#new_account_form') .on('ajax:before', function () { // some validation }) .on('ajax:success', function (data, status, xhr) { // insert the data returned into the page $('#articles').append(data); });

Your server will only return HTML. So what is the improvement? At least your JavaScript code is in one place making it easier to refactor later.

Other Alternatives

Other good alternatives are not to use Rails UJS at all, just plain AJAX or using a JavaScript framework. These can encourage better structured applications, but that is too big of a topic to cover here.

Conclusion

Rails UJS + server sent JavaScript is great for trivial things, but it doesn’t scale very well for medium to large applications. So I believe that completely avoiding JavaScript responses from the server is a good first step for making more robust and maintainable applications (there is a lot more to it than that, of course).

Your server should only respond with either HTML or JSON, never JavaScript.