Path: csiph.com!eternal-september.org!feeder.eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
From: Ben Bacarisse <ben.usenet@bsb.me.uk>
Newsgroups: comp.lang.javascript
Subject: Re: JavaScript code security
Date: Wed, 24 May 2017 14:28:47 +0100
Organization: A noiseless patient Spider
Lines: 23
Message-ID: <87r2zetmcw.fsf@bsb.me.uk>
References: <58a53166-53fb-4974-9264-d73f26a0a549@googlegroups.com> <9817aa91-22fd-4064-980c-c872fe530dd3@googlegroups.com> <cb7fe530-be69-4666-a229-2bfb420d4855@googlegroups.com> <87poezuiyc.fsf@bsb.me.uk> <ac0124ee-ead4-4bc9-91a8-c0d8cb16d673@googlegroups.com> <XnsA77F5D895B25Aeejj99@194.109.6.166>
Mime-Version: 1.0
Content-Type: text/plain
Injection-Info: mx02.eternal-september.org; posting-host="95aa184a244c61a799406b3927b6d4cb"; logging-data="10113"; mail-complaints-to="abuse@eternal-september.org";	posting-account="U2FsdGVkX188yaH0XTX5Dw3yTFbdC6vRURQ2gqBt6E0="
Cancel-Lock: sha1:wVGpNZs1ukT4Rr9iRwtqQLCosVU= sha1:vQymzH46vRC78zqZMqgVYi7gC08=
X-BSB-Auth: 1.f6fe2425785f5a44e41a.20170524142847BST.87r2zetmcw.fsf@bsb.me.uk
Xref: csiph.com comp.lang.javascript:33389

"Evertjan." <exxjxw.hannivoort@inter.nl.net> writes:

> justaguy <lichunshen84@gmail.com> wrote on 24 May 2017 in 
> comp.lang.javascript:
>
>>> The bottom line is that client-side scripting can't do any serious
>>> validation.  Use it to improve the user experience, not to protect your
>>> data integrity.
>>> 
>> "Certainly", could you show me an example?
>
> Wrong Q.
>
> "An" example of code that "can't do" something is nonsense.

You cut too much context.  justaguy quoted "certainly" because I'd
stated that something can certainly be done (circumvent client-side data
validation) and he was asking for an example of that.  The thread seems
to have moved now so no need for one, I think.

<snip>
-- 
Ben.