Reputation: 18865
Just wondering, should we be using Meteor's sessions on the assumption that in production, the user has read and/or write access to them at all times or is it like encrypted similar to ASP.NET View States?
Just want to know if I have to design / test my application for the user modifying them.
Upvotes: 2
Views: 169
Reputation: 2978
Session variables are not hidden. Anyone can view and change the values.
Upvotes: 3