Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Ok, can anyone smarter than myself tell me if I'm justified in getting a little bit excited about the 'freeze' function on objects that makes properties read only? My first thought is that it sounds like a perfect first line of defence in terms of being able to get trustworthy data back from the client bundled up in a frozen object.


I'm a little unclear about what your proposing but, at first interpretation, I don't think so ... What exactly are you suggesting you should use 'freeze' to do?

As a rule of thumb, you can never trust anything the client sends you - just assume he's a skilled hacker who is manually manipulating bits to do what he wants.


Firebug would probably be able to "thaw", in any case.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: