/    Sign up×
Community /Pin to ProfileBookmark

security on front end

Copy linkTweet thisAlerts:
Apr 17.2017

Hi,

I would like to develop a web application and i wanted to know, how can i secure enough front end knowing that front end consists of html, javascript/javascript frameworks and css ?
First step must be to force HTTPS i guess and to use a session to store not sensible data.

Is it correct ?

Regarding forcing HTTPS, i do not think that forcing HTTPS using javascript is a good solution as it can be hacked, so the best and easiest way is to use apache/nginx or is there other possibilities ?

thx

to post a comment
JavaScript

1 Comments(s) ↴

Copy linkTweet thisAlerts:
@rootApr 18.2017 — You can't rely on using JavaScript to do your front end security, you should always deal with security in an environment that you have control over.

If your host provides you with HTTPS server services then use them.

JavaScript can be turned off in the browser, that then renders useless as any security routines wouldn't be running.
×

Success!

Help @alain spread the word by sharing this article on Twitter...

Tweet This
Sign in
Forgot password?
Sign in with TwitchSign in with GithubCreate Account
about: ({
version: 0.1.9 — BETA 6.17,
whats_new: community page,
up_next: more Davinci•003 tasks,
coming_soon: events calendar,
social: @webDeveloperHQ
});

legal: ({
terms: of use,
privacy: policy
});
changelog: (
version: 0.1.9,
notes: added community page

version: 0.1.8,
notes: added Davinci•003

version: 0.1.7,
notes: upvote answers to bounties

version: 0.1.6,
notes: article editor refresh
)...
recent_tips: (
tipper: @nearjob,
tipped: article
amount: 1000 SATS,

tipper: @meenaratha,
tipped: article
amount: 1000 SATS,

tipper: @meenaratha,
tipped: article
amount: 1000 SATS,
)...