Zaid-Ajaj / Fable.Remoting

Type-safe communication layer (RPC-style) for F# featuring Fable and .NET Apps
https://zaid-ajaj.github.io/Fable.Remoting/
MIT License
272 stars 55 forks source link

Does fable remoting do runtime validation? #331

Closed Darkle closed 1 year ago

Darkle commented 1 year ago

Hi, I'm brand new to using Fable.Remoting and was wondering if Fable.Remoting does any runtime validation.

For instance, what if a client is misconfigured (or malicous) and sending bad data? Would Fable.Remoting throw an error on the server or would it let the bad data through?

Zaid-Ajaj commented 1 year ago

Hi there @Darkle, remoting does not do any special validation to the data and assume the client is in sync with the server. There are patterns you can use where you implement parsing validation for your domain types in the shared project and use the validation logic both on the frontend and backend.

Darkle commented 1 year ago

Ok, thanks.