DEV Community

Discussion on: How safe is same-origin client-server communication?

Collapse
 
patarapolw profile image
Pacharapol Withayasakpunt • Edited

I have tried to give client a power to query with a string parser as well, but I guess it is best to give least power to client. Still, perhaps allow full-text-search.

Otherwise, I am thinking about stateless, unbreakable server. But databases are usually not stateless.