Why can’t we just use JavaScript or HTML 5 attributes that restrict input data to ensure that forms are properly filled out? Why must we also validate on the server-side?

Answered: Why can’t we just use JavaScript or…

Computer Networking: A Top-Down Approach (7th Edition)

7th Edition

ISBN:9780133594140

Author:James Kurose, Keith Ross

Publisher:James Kurose, Keith Ross

Chapter1: Computer Networks And The Internet

Section: Chapter Questions

Problem R1RQ: What is the difference between a host and an end system? List several different types of end...

See similar textbooks

Related questions

Question

Why can’t we just use JavaScript or HTML 5 attributes that restrict input data to ensure that forms are properly filled out? Why must we also validate on the server-side?

Expert Solution

Step 1

Client-side validation provides the user with quick feedback without expecting for the page to load. But, if the client has turn-off or disabled the client-side scripts (JavaScript), the validation will not execute which is why there is a need of the server to verify the values as well.

In other words, if the users turn-off the JavaScript, then it can simply bypass and submit the dangerous data to the server. Hence, Client-Side Validation can't guard the application against malicious attacks on the server resources and databases. That's why it is recommended that the Server-side validation is more SECURE!