javascript - Is it correct, that i am able to change AngularJSs $scope variables through Google Chromes Developer Console? -
i have written small angularjs application. using variable:
$scope.isadmin = boolean
what colleague found out is, able open google chromes developer console , step js code through debugger @ code , example following on console:
$scope.isadmin = true;
after variable modified , whatever wanted in app.
is general of angularjs? doing in real world apps prevent editing $scope variables?
br yavuz
you can hide things , make more difficult user access data user able access data if dedicated enough. key server-side validation on requests confirm user are. keep user doing fake admin privileges.
Comments
Post a Comment