DEV Community

Discussion on: Security for the front-end developer

Collapse
 
lexlohr profile image
Alex Lohr

Since you will always need to secure your back end, many front end developers forget that security in the front end is important, too. There could always be situations when whatever happens there is not connected to your own back end service.

It could be a post message that you have unsuspectingly set up a listener for without a sanity check for the origin. Or the user pastes content in a content-editable element (or WYSIWYG editor) unchecked. Or you have a script from a third party without at least a checksum verification.

So thanks for reminding us that we're responsible for our user's security, too, Victoria.