Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.lang.javascript > #33388

Re: JavaScript code security

Path csiph.com!eternal-september.org!feeder.eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
From John G Harris <niam@jghnorth.org.uk.invalid>
Newsgroups comp.lang.javascript
Subject Re: JavaScript code security
Date Wed, 24 May 2017 14:19:40 +0100
Organization A noiseless patient Spider
Lines 10
Message-ID <422bich7hemhuhdr77fb58jfsprigttbin@4ax.com> (permalink)
References <58a53166-53fb-4974-9264-d73f26a0a549@googlegroups.com> <9817aa91-22fd-4064-980c-c872fe530dd3@googlegroups.com> <cb7fe530-be69-4666-a229-2bfb420d4855@googlegroups.com> <87poezuiyc.fsf@bsb.me.uk> <590c979c-cb90-40ae-8f5b-ee24124bd364@googlegroups.com>
Reply-To jgharris@ic4life.net
Mime-Version 1.0
Content-Type text/plain; charset=us-ascii
Content-Transfer-Encoding 7bit
Injection-Info mx02.eternal-september.org; posting-host="3f82e296419ae47bf7d346bb3217391a"; logging-data="11681"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX18s9BOXQZ/hTD7sM8+Pqq3Ez5O1DrY8jPY="
User-Agent ForteAgent/7.00.32.1200
Cancel-Lock sha1:+ODFLG9MzVuM/yfVQpY0NFJKBUw=
Xref csiph.com comp.lang.javascript:33388

Show key headers only | View raw

On Wed, 24 May 2017 06:01:06 -0700 (PDT), justaguy
<lichunshen84@gmail.com> wrote:

  <snip>
>On a second thought, I realized it's easy to avoid client side data duplication validation by opening up two tabs for the same form, copy/paste identical data to the two screens and then hit submit for both, without server side data validation, now we would have two identical records.  Though 99% of users would not do that but the 1% asshole could cause problem.

And a third thought : What's to stop a hacker writing his own web page
that sends all sorts of naughty submit data to your server ?

  John

Back to comp.lang.javascript | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

JavaScript code security justaguy <lichunshen84@gmail.com> - 2017-05-23 13:02 -0700
  Re: JavaScript code security justaguy <lichunshen84@gmail.com> - 2017-05-23 13:11 -0700
    Re: JavaScript code security justaguy <lichunshen84@gmail.com> - 2017-05-23 17:56 -0700
      Re: JavaScript code security Ben Bacarisse <ben.usenet@bsb.me.uk> - 2017-05-24 02:44 +0100
        Re: JavaScript code security justaguy <lichunshen84@gmail.com> - 2017-05-23 19:06 -0700
          Re: JavaScript code security "Evertjan." <exxjxw.hannivoort@inter.nl.net> - 2017-05-24 09:11 +0200
            Re: JavaScript code security justaguy <lichunshen84@gmail.com> - 2017-05-24 05:56 -0700
              Re: JavaScript code security Wally W. <ww84wa@aim.com> - 2017-05-29 14:57 -0400
                Re: JavaScript code security "Evertjan." <exxjxw.hannivoort@inter.nl.net> - 2017-05-30 09:41 +0200
                Re: JavaScript code security Thomas 'PointedEars' Lahn <PointedEars@web.de> - 2017-06-23 10:53 +0200
                Re: JavaScript code security "Evertjan." <exxjxw.hannivoort@inter.nl.net> - 2017-06-23 13:38 +0200
            Re: JavaScript code security Ben Bacarisse <ben.usenet@bsb.me.uk> - 2017-05-24 14:28 +0100
              Re: JavaScript code security "Evertjan." <exxjxw.hannivoort@inter.nl.net> - 2017-05-24 18:07 +0200
        Re: JavaScript code security justaguy <lichunshen84@gmail.com> - 2017-05-24 06:01 -0700
          Re: JavaScript code security John G Harris <niam@jghnorth.org.uk.invalid> - 2017-05-24 14:19 +0100
            Re: JavaScript code security justaguy <lichunshen84@gmail.com> - 2017-05-24 10:01 -0700
              Re: JavaScript code security "Evertjan." <exxjxw.hannivoort@inter.nl.net> - 2017-05-24 19:18 +0200
                Re: JavaScript code security justaguy <lichunshen84@gmail.com> - 2017-05-24 11:39 -0700
                Re: JavaScript code security "Evertjan." <exxjxw.hannivoort@inter.nl.net> - 2017-05-24 23:07 +0200
                Re: JavaScript code security justaguy <lichunshen84@gmail.com> - 2017-05-24 14:26 -0700
                Re: JavaScript code security "Evertjan." <exxjxw.hannivoort@inter.nl.net> - 2017-05-25 16:26 +0200
  Re: JavaScript code security Thomas 'PointedEars' Lahn <PointedEars@web.de> - 2017-05-24 01:12 +0200
    Re: JavaScript code security justaguy <lichunshen84@gmail.com> - 2017-05-23 17:15 -0700
      Re: JavaScript code security Stefan Weiss <krewecherl@gmail.com> - 2017-05-24 04:14 +0200
        Re: JavaScript code security justaguy <lichunshen84@gmail.com> - 2017-05-23 19:47 -0700
  Re: JavaScript code security Myers <xdaamanx@gmail.com> - 2017-05-29 07:54 -0700
  Re: JavaScript code security Myers <xdaamanx@gmail.com> - 2017-05-29 07:55 -0700

csiph-web