Am 04.05.2013 um 07:29 schrieb Ben Coman <btc@openInWorld.com>:
Igor Stasenko wrote:
On 4 May 2013 01:01, Javier Pimás <elpochodelagente@gmail.com> wrote:
Cool! And I just discovered that typing smalltalk.Browser._open() in the javascript console on smalltalkhub site lets you see how the client side works.
Just don't break it please. I need st-hub in working state :) What are the security implications of this ? I guess no more than plain Javascript - the server should not blindly trust what the client sends.
See! That's a good example why "security by obscurity" does not work. It just needs a hacker like Javier to workaround it easily. So Javier has control over all of the servers? That's not goo...wait a minute..maybe it is good to have another administrator of the site..? Hmmm... Norbert