|
|
Posted by Jasper Bryant-Greene on 07/18/05 12:07
Raz wrote:
>>You can put the value in a hidden form field and submit it with
>>JavaScript, but it's still not truly hidden, as it is still sent in a
>>cleartext HTTP request.
>
> Not to mention being visible upon viewing the page source...
Well, that depends. If it's user input that is added via JavaScript when
a link/button is clicked, then it won't be visible in the source.
Regardless, though, it's not really any form of security.
Jasper
Navigation:
[Reply to this message]
|