Alex Rivera | Logout

Why is client-side validation a security risk as opposed to server-side validation?

Asked 2010-08-20T14:45:38.180
12

I don't quite understand why client side validation is a potential security risk or more of a security risk than server side validation? Can someone give me some scenarios?

validation client-side-validation
Edit
Report

1 Answer

2

I assume you're talking about a web scenario?

If you're doing client side validation with Javascript, what happens if the user has Javascript disabled? Then they can submit data to the server that has not been validated.

If they were sneaky, they could even post data directly to your server (bypassing your page completely).

If you do server side validation, in addition to or instead of client side validation, then you have an additional opportunity to defend against these scenarios.

answered 2010-08-20T14:49:43.827

Your Answer