4 ms·
I wonder if even that's feasibly secure though, when you have stuff like http://esprima.org http://esprima.org that can let you fully parse the entirety of the
by konklone 13y ago
I wonder if even that's feasibly secure though, when you have stuff like http://esprima.org http://esprima.org that can let you fully parse the entirety of the JS on the page.
It's better to assume the console has 100% root (client-side) privileges.
- Drakim 13y agoBut the enemy here isn't necessarily the console, it's the social attack against the console. Making it harder for the user to screw himself over is a worthwhile endeavor, and not merely "security by obscurity".