Links

Lists

Latest Updates

Ruby On Rails List
Python list
Advanced Java
The JavaScript List
Apache Users
Full Disclosure
Linux Security

Search the archives!


[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Javascript] DevToolbar


  • From: allard-schripsema at procergs.rs.gov.br (Allard Schripsema)
  • Subject: [Javascript] DevToolbar
  • Date: Wed Feb 15 14:09:25 2006

Hi All,
This monday someone in this list alerted me about the Microsoft DevToolbar.
A great plugin for webdevelopers, similar to firefox tools etc.
But also a great "hacker"-tool as i discovered, testing it out on our
(asp-vb) intranet application.

I can rewrite inputs sothat all validation is "erased", create buttons
executing javascript, etc, causing me to have some questions i want to share
with you:

I wonder if these tools mean the end of javascript as a browserside
validator? What is the point in validating clientside, if you have to
rewrite the code on the server?

Is the aspnet viewstate a defence against this kind of pagetampering, or
does it also simply accept changes? How do other languages protect
themselves?
Is there any easy way of protecting the pages against these tools?

thanks,
Allard Schripsema
www.VisualDigital.com.br