2 ms·

but is this security issue?

• jaffathecake 5y ago
  Being able to bypass a check sounds like a security issue to me.
  • tester34 5y ago
    but wouldn't it be the problem with deserialization on the server side? edit. oh I see, somebody can overwrite other params, yea?
    • jaffathecake 5y ago
      It could be client side, where you're using it to hide content from someone who doesn't want to see something potentially abusive. I did assume the example was client side, but it might not be. The server may be using it to avoid adding a comment to a database if it's abusive. URLSearchParams exists in Node too https://nodejs.org/api/url.html#url_class_urlsearchparams https://nodejs.org/api/url.html#url_class_urlsearchparams. There are fetch polyfills available, but the plan is to add it to node.
  • rattlesnakedave 5y ago
    isn't this something that's being executed client side? why trust it at all?