clear, using Firebug I can find (!user.isAuthenticated()) and any
a JS debugger to subvert it. GWT obfuscates JS code, but
anyone with 1) curiosity and a brain, 2) ulterior motives , this
is a cakewalk.
Think about it.
and
NEVER TRUST THE CLIENT. Always verify every action for permission
on the server side.
--
You received this message because you are subscribed to the Google Groups "Google Web Toolkit" group.
To post to this group, send email to google-web-toolkit@googlegroups.com.
To unsubscribe from this group, send email to google-web-toolkit+unsubscribe@googlegroups.com.
For more options, visit this group at http://groups.google.com/group/google-web-toolkit?hl=en.
No comments:
Post a Comment