Web security, are there issues with hidden fields (no sensitive data)?

后端 未结 10 1596
余生分开走
余生分开走 2020-12-31 04:36

I was having a discussion with coworkers. We have to implement some security standards. We know not to store \'sensitive, addresses, date of birth\' information in hidden

10条回答
  •  梦毁少年i
    2020-12-31 04:47

    Storing your data in a hidden field is, from a security standpoint, exactly the same as storing it in the query string. In fact, if your form uses the GET action, it ends up int he query string anyway.

    Hidden fields are completely unrelated to security in any way; they are simply a method by which data can be stored in a form without forcing the user to see it. They do not provide a way of preventing the user from seeing it.

提交回复
热议问题