New answers tagged

0

The real thing here is frontend & backend. It is fine to load the full frontend (even, your javascript code will usually contain the Admin pages layout). This is just UI/UX. The real sensitive data/actions lie in the backend: read/write access to the actual database(s). There is no issue with knowing that the admin interface has a button that starts ...


1

The page itself will generally be HTML, javascript and CSS, which are all statically stored in an S3 bucket. Hence the user could figure out what features are available on the page without ever logging in by inspecting the contents of the files -- but they would not be able to execute that functionality, as each API endpoint would be protected to ensure only ...


Top 50 recent answers are included