Using React, Redux and SSR to acommodate users without JavaScript

Re:Using React, Redux and SSR to acommodate users without Ja... by hoppla on Sunday June 07, 2020 @07:48AM (#23446703)

I am curious on how SSR impact security. JS enabled web clients have many security mechanisms, but are there any relevant ones that are missing from the server side engine?

[ Parent | on HN ]

Re:Using React, Redux and SSR to acommodate users without Ja... by 0xy on Sunday June 07, 2020 @08:03AM (#23446774)

I can say that speaking as someone working on a high-volume eCommerce website, you would not even be allowed to checkout without JS enabled.

The fraud is just insane. With JS anti-fraud tech you can eliminate a significant majority of fraud.

[ Parent | on HN ]

Re:Using React, Redux and SSR to acommodate users without Ja... by 734129837261 on Sunday June 07, 2020 @08:16AM (#23446839)

You rely on client-side JS to secure checkouts?

Everywhere I've worked doesn't really care about the frontend (it is merely the first line of defense); everything is validated and authorized on the backend.

[ Parent | on HN ]

Re:Using React, Redux and SSR to acommodate users without Ja... by 0xy on Sunday June 07, 2020 @08:34AM (#23446907)

Anti-fraud is somewhat different than traditional web application security. With anti-fraud, it's about recognizing behaviors and patterns that are likely to result in a fraudulent transaction (stolen credit card, mismatched information, sketchy browser, script/bot-like behavior etc).

In large scale ecommerce, fraudulent transactions in the 5 figures is so common it's not even notable. So using JS to reduce this even by half saves the company literally millions of dollars.

[ Parent | on HN ]