mercredi 30 mai 2018

Does in-browser routing is safe?

There are multiple ways for routing and redirection, but considering between two below:

  1. In-browsing routing via js (some frameworks like react-router). It requires some code, that will parse server response and make redirection based on status code.
  2. Automated redirection from server based on 302 status code. No need to manually redirect clients url.

The second one is hard to achieve if client is on the another domain (CORS).

The question: does it safe to use first approach in comparison to second one (because first approach stores redirection urls and logic on the client side)?




Aucun commentaire:

Enregistrer un commentaire