Am 04.05.2013 um 07:29 schrieb Ben Coman <btc@openInWorld.com>:Igor Stasenko wrote:See! That's a good example why "security by obscurity" does not work. It just needs a hacker like Javier to workaround it easily. So Javier has control over all of the servers? That's not goo...wait a minute..maybe it is good to have another administrator of the site..? Hmmm...On 4 May 2013 01:01, Javier Pim�s <elpochodelagente@gmail.com> wrote:What are the security implications of this ?Cool! And I just discovered that typing smalltalk.Browser._open() in the
javascript console on smalltalkhub site lets you see how the client side
works.
Just don't break it please. I need st-hub in working state :)
I guess no more than plain Javascript - the server should not blindly trust what the client sends.
Norbert