On Sunday, September 25, 2016 at 3:10:29 PM UTC-5, Yehonathan Sharvit wrote:
> There might me security issues if the website allows users to modify the 
> contents of the page - like Wikipedia or clojuredocs.org.
> 
> A malicious user might write cljs code that will do malicious actions that 
> run on the browser of all your visitors
> 
> On Sunday, 25 September 2016 19:47:03 UTC+3, mars0i  wrote:
> > On Sunday, September 25, 2016 at 12:32:36 AM UTC-5, Brandon Adams wrote:
> > > The users already have a javascript repl with the same abilities and 
> > > permissions as the cljs repl you give them.
> > 
> > Oh!  Good point.  Got it.  Thanks.
> 
> There might me security issues if the website allow users to modify the 
> contents of the page - like Wikipedia or clojuredocs.org.
> 
> A malicious user might write cljs code that will do malicious actions that 
> run on the browser of all your visitors...

I understand.  In my application, users will affect the output they see in 
their browser, but I don't see any way that they could modify what I put on the 
server, which will always be the same unless I change it.  Thanks for 
clarifying that.

-- 
Note that posts from new members are moderated - please be patient with your 
first post.
--- 
You received this message because you are subscribed to the Google Groups 
"ClojureScript" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to clojurescript+unsubscr...@googlegroups.com.
To post to this group, send email to clojurescript@googlegroups.com.
Visit this group at https://groups.google.com/group/clojurescript.

Reply via email to