Web security, are there issues with hidden fields (no sensitive data)?

后端 未结 10 1593
余生分开走
余生分开走 2020-12-31 04:36

I was having a discussion with coworkers. We have to implement some security standards. We know not to store \'sensitive, addresses, date of birth\' information in hidden

10条回答
  •  粉色の甜心
    2020-12-31 04:56

    Making a field "hidden" has pretty much nothing to do with security, and should be considered a UI decision. Any "hacker" will read your HTML source anyway.

    Better to either not show sensitive information at all, or, if you must, to use SSL (to prevent data interception by network intermediaries) and some combination of login challenges (to prevent unauthorized access).

提交回复
热议问题