New answers tagged

2

You can't trust the client at all, for anything, ever, and JavaScript also runs on the client. If you want to make sure this field isn't actually used, you need to make the server not read it.


Top 50 recent answers are included