search

programsam / binkjs

Music archival site BINK, rewritten as a Node.js express app
0 stars 1 forks source link

No javascript-implemented security #50

Open programsam opened 6 years ago

programsam commented 6 years ago

Just remembered I've done some client side javascript that like checks if something is private or not before showing it to you... Nothing wrong with that, so long as the server does it too/first.

programsam commented 6 years ago

Found one instance of this where it was doing it with the blog jams, but needed to get rid of that because when you are admin, they need to show up. So this actually is not a good thing to do at all ever. The server should be 100% responsible for determining what you can see or not.