DEV Community

Discussion on: Handling Injection Attacks With JavaScript

Collapse
 
sqlrob profile image
Robert Myers

but having it on the back-end as well doesn't hurt

I think this recommendation is too weak. You should ALWAYS have it on the backend too, never trust the client is one of the maxims of security.