Web app UI security in one tweet: Assume the client will -Change the URL...


Web app UI security in one tweet:

Assume the client will
-Change the URL params
-Use devtools to manipulate the UI
-Change localStorage, cookies, or IndexDB
-Generate and submit random HTTP requests via tools like Postman

Never trust the client.

View original on X