Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Security in backbone.js?

I'm new to the world of coffeescript (javascript). Currently building my first backbone.js app which communicates with a Rails backend over SSL.

Over the years I've been told many times over that "JavaScript security sucks, so perform all logic server-side if possible." I've got a handle on server-side security, but what about the client?

It's possible that some of my backbone models will contain information that users will wish to protect.

Update 1: In response to @Nupul, I wish to protect tuples of (integer, string, datetime). Nothing that could compromise any remote system.

Update 2: So the only thing to be aware of is to provide the same data to backbone that one would consider secure to provide in a js-free html view?

like image 390
Alec Wenzowski Avatar asked Oct 14 '11 00:10

Alec Wenzowski


People also ask

Does anyone still use Backbone JS?

Backbone. Backbone has been around for a long time, but it's still under steady and regular development. It's a good choice if you want a flexible JavaScript framework with a simple model for representing data and getting it into views.

Should I use Backbone JS?

The developers should make use of Backbone JS while developing a single-page Java application. Backbone JS features Model View Framework, which allows much more than structuring JavaScript architecture. It will help the developers eliminate several issues that they might be facing while developing apps.

What is backbone JS used for?

BackboneJS is a lightweight JavaScript library that allows to develop and structure the client side applications that run in a web browser. It offers MVC framework which abstracts data into models, DOM into views and bind these two using events.

What is the architecture of backbone JS?

It is based on the Model-View Controller framework that binds data, which is abstracted into models, and DOM which is abstracted into views, using events. It is a JavaScript library. Applications of Backbone. js: Following are the applications of Backbone.


1 Answers

JavaScript security, in the sense you mean, doesn't just suck, it's literally impossible. You cannot trust code you run on the client. You'll need to structure your program in such a way that your server never sends information to a client's computer unless you want them to be able to see it.

like image 127
Jeremy Avatar answered Oct 21 '22 20:10

Jeremy