2 ms·
There's lack of security theater and there's: > All "access control" logic lived in the JavaScript on the client side, meaning the data was literally one curl
by ginko 6mo ago
There's lack of security theater and there's:
> All "access control" logic lived in the JavaScript on the client side, meaning the data was literally one curl command away from anyone who looked.
They are not the same thing.