You're viewing the mstdn.social public feed.

Malcolm Herbertmherbert@chinwag.org
Jun 8, 2026, 3:37 AM
@ifixcoinops lots of folk use client-side JavaScript to do form validation and I get that, but if I can still submit to the form back-end directly with curl, what then? hopefully the back-end _also_ does validation otherwise at some point you will meet everyone's little friend johnny drop tables ...
💬 2🔄 0⭐ 7

Replies

Malcolm Herbertmherbert@chinwag.org
Jun 8, 2026, 3:38 AM
@ifixcoinops ... I may be triggered, sorry ...
💬 0🔄 0⭐ 3
NKTDss@infosec.exchange
Jun 8, 2026, 4:15 PM
@mherbert @ifixcoinops checking stuff in the front end is simply "nice", but has zero actual authority.
💬 1🔄 0⭐ 0
Malcolm Herbertmherbert@chinwag.org
Jun 8, 2026, 9:53 PM
@Dss @ifixcoinops exactly - same deal with apps vs database: you need the controls on at least the back-end if not both
💬 0🔄 0⭐ 0
NKTDss@infosec.exchange
Jun 8, 2026, 11:25 PM
@mherbert @ifixcoinops front end helps the user, back end helps the Dev.
💬 0🔄 0⭐ 0