3 ms·
Would have to do the signing server-side, predicated on the server checking the entire state to ensure validity. Such effort being put into preventing parameter
by hot_gril 4y ago
Would have to do the signing server-side, predicated on the server checking the entire state to ensure validity. Such effort being put into preventing parameter-hacking would suggest there are serious vulnerabilities in that website. The URL is meant to be modified by the client.
- hot_gril 4y ago> The URL is meant to be modified by the client. Clarification, the human user probably won't want to modify the URL, but the client will.
- thomasahle 4y agoWith something nice like the Google url, I would happily modify it myself.