Post #3267209
2026-06-08 03:37 UTC
@ifixcoinops@retro.social lots of folk use client-side JavaScript to do form validation and I get that, but if I can still submit to the form back-end directly with curl, what then? hopefully the back-end _also_ does validation otherwise at some point you will meet everyone's little friend johnny drop tables ...
Replies (2)
-
@mherbert@social.chinwag.org 2026-06-08 03:38
@ifixcoinops@retro.social ... I may be triggered, sorry ...
-
@Dss@infosec.exchange 2026-06-08 16:15
@mherbert@social.chinwag.org @ifixcoinops@retro.social checking stuff in the front end is simply "nice", but has zero actual authority.