4 ms·
> The last 5 years there has been a dramatic shift away from HTML web pages to javascript web applications on sites that have absolutely no need to be an applic
by Alex3917 6y ago
> The last 5 years there has been a dramatic shift away from HTML web pages to javascript web applications on sites that have absolutely no need to be an application.
SPAs are a lot easier to keep secure though, so if you don't want your private data leaked then they're a much better option.
- nicou 6y agoHow are SPAs any easier to keep secure?
- Alex3917 6y agoThere's a very clear separation between the front end and the back end, which makes it easy to write tests that allow-list only the specific data that's supposed to be getting returned.
- randompwd 6y agoAny and all scripts that are loaded at any point in the SPA stay for the duration of the visit. 3rd party scripts are a big risk and not being able to unload JS scripts and associated in-mem/in-page symbols etc. is a timebomb waiting to explode.