3 ms·
Insecure is there to help speed development when you are getting started. All frameworks can do their best to compensate for security holes, but ultimately peo
by joshowens 13y ago
Insecure is there to help speed development when you are getting started.
All frameworks can do their best to compensate for security holes, but ultimately people need to pay attention to it. That being said, Meteor offers a call method and code runs on the server - if security is a concern then you should pay attention to what happens on the server.
- MichaelGG 13y agoI've not used Meteor. How exactly does "insecure" help speed development? Certainly any code you write with it is worthless, right? I mean, before production you need to remove it and rewrite it using another method, so what's the point? Or do you mean it's useful on the sysadmin side, as a REPL-like data access console?
- jaredsohn 13y agoFrom meteor.com: >By default, a new Meteor app includes the autopublish and insecure packages, which together mimic the effect of each client having full read/write access to the server's database. These are useful prototyping tools, but typically not appropriate for production applications. When you're ready, just remove the packages.
- ajlin500 13y agoIt makes it easy to run DB calls from the chrome console to insert and modify test data