3 ms·
The input field isn’t the problem here. In fact the article even mentions that you need to hijack the request and alter the phone number. So I guess the Apple e
by planb 5y ago
The input field isn’t the problem here. In fact the article even mentions that you need to hijack the request and alter the phone number. So I guess the Apple engineer that created this feature fell for the same misunderstanding that you did: user input can never be trusted, even when validated client side. You always have to do service side validation!
- chrisjc 5y agoJust to be clear, i wasn't suggesting that client-side validation was the issue. See my response above. https://news.ycombinator.com/item?id=28697485 https://news.ycombinator.com/item?id=28697485