CODEWITHSUNDEEP
c#javascriptjquerysecurityintegrity
FredB
FredB

Reputation: 53

Checking integrity of javascript, user code=server code

Is there a way to verify that the user changed the jQuery/JavaScript with Firebug during the use of client-side page?

Upvotes: 3

Views: 160

Answers (3)

Woot4Moo
Woot4Moo

Reputation: 24336

Short answer it doesn't matter.
Long answer:
It matters if you are treating the JavaScript as part of your application structure, similar to how a SQL injection attack does bad things to your system. You should validate that anything that gets passed from the client is sanitized before being stored. The interesting attack vector here is if you allow me to persist elements into the structure of the web page and retrieve them at a later time. You have opened the doors to a reflected XSS attack (one of my favorites). This is indicative of a failure to sanitize user input and/or a failure to separate concerns UI from the system level code.

Upvotes: 0

spender
spender

Reputation: 120498

No. The client is fundamentally unsafe and belongs to the user, not you.

Upvotes: 1

Oded
Oded

Reputation: 499132

No, there is no way to verify this.

When it comes to input from the browser, you should always verify and validate. Never trust the client.

Upvotes: 4

Related Questions