DEV Community

Discussion on: Input Validation: Client-side or Server-side?

Collapse
 
nialljoemaher profile image
Niall Maher

Clientside for helpful error messages for the user and then serverside to just check it is right or wrong. I tend to give pretty generically named/labelled errors back from the server in case somebody is trying to find a vulnerability. Yes, there is often duplication but a necessary evil to make sure your application is both secure and user friendly.❤️