Web security, are there issues with hidden fields (no sensitive data)?

后端 未结 10 1592
余生分开走
余生分开走 2020-12-31 04:36

I was having a discussion with coworkers. We have to implement some security standards. We know not to store \'sensitive, addresses, date of birth\' information in hidden

10条回答
  •  长发绾君心
    2020-12-31 04:47

    It's only a security hole if you're exposing information that wouldn't be otherwise available to the end user and/or aren't validating it on return.

    I'd look instead to storing said information in a server side session variable instead...

提交回复
热议问题