How to Hide data attributes

Question

Hay Guys,

i have a problem.

Is there any way to prevent client-side manipulation on HTML data-attributes.

My problem is, if someone is clever enougth to look at the source code and changing the attribute, for example im using jQuery/ajax to get the value of my data-attribute and send it with ajax to my controller. My controller now starts to look with switch case is matching with my data i got out of my data-attr.

But if i change the data-attr value in something that doesnt even exist it shows my the default case.

Is there any way i can prevent / avoid this problem.

var saveAttr = jQuery('#example').attr("data-attr");

jQuery.ajax({
  url: "forexample",
  method: "POST",
  data: { action: "someCaseinMyController", saveAttr:saveAttr },
}).done(function (response){
  jQuery("#someDiv").html(response);
});

Is there any way to prevent client-side manipulation on HTML data-attributes? => no. — Mister Jojo
– Mister Jojo, Commented Oct 9, 2019 at 13:29

Jay Kariesch · Accepted Answer · 2019-10-09 13:33:49Z

1

Short answer: no.

Longer answer: Turn your switch case values into a lookup map or an array, and test the value as it comes in so you can throw an error before it reaches your switch case.

That can be done like this:

const arrayOfCases = ['name', 'email', 'city', 'state', 'address']

if(arrayOfCases.includes(userInput)) {
   // your switch case here
} else {
   // handle invalid data
}

answered Oct 9, 2019 at 13:33

Jay Kariesch

1,4929 silver badges14 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

MhmmDonuts Over a year ago

Oh, thats realy nice idea !

Collectives™ on Stack Overflow

How to Hide data attributes

1 Answer 1

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related