开发者

Security issues with jLinq

I stumbled upon jLinq through the open source ads in stackoverflow.

The possibilities are astonishing but I am wondering.

What开发者_运维知识库 kind of datasets I shouldn't be using it on?

As those datasets run on the client they could be modified using the URL: javascript: ...

What should be done to prevent rewriting of data?

How do I authenticate that I am the only one that is changing or selecting it?


jLinq is strictly for working with client side JSON data (although you can do some neat stuff with server side databases like MongoDB). Since anything can be modified by the client at any time you should always validate the information fed back to the server.

0

上一篇:

下一篇:

精彩评论

暂无评论...
验证码 换一张
取 消

最新问答

问答排行榜