A message from our CEO about the future of Stack Overflow and Stack Exchange. Read now.

Hot answers tagged

2

You can't trust the client at all, for anything, ever, and JavaScript also runs on the client. If you want to make sure this field isn't actually used, you need to make the server not read it.


Only top voted, non community-wiki answers of a minimum length are eligible