4 ms·
I am curious on how SSR impact security. JS enabled web clients have many security mechanisms, but are there any relevant ones that are missing from the server
by hoppla 6y ago
I am curious on how SSR impact security. JS enabled web clients have many security mechanisms, but are there any relevant ones that are missing from the server side engine?
- 0xy 6y agoI can say that speaking as someone working on a high-volume eCommerce website, you would not even be allowed to checkout without JS enabled. The fraud is just insane. With JS anti-fraud tech you can eliminate a significant majority of fraud.
- 734129837261 6y agoYou rely on client-side JS to secure checkouts? Everywhere I've worked doesn't really care about the frontend (it is merely the first line of defense); everything is validated and authorized on the backend.
- deleted 6y ago[deleted]
- 0xy 6y agoAnti-fraud is somewhat different than traditional web application security. With anti-fraud, it's about recognizing behaviors and patterns that are likely to result in a fraudulent transaction (stolen credit card, mismatched information, sketchy browser, script/bot-like behavior etc). In large scale ecommerce, fraudulent transactions in the 5 figures is so common it's not even notable. So using JS to reduce this even by half saves the company literally millions of dollars.