Are Front-end frameworks a security vulnerability by default?

Поділитися
Вставка
  • Опубліковано 7 лис 2024

КОМЕНТАРІ • 30

  • @TheAlexLichter
    @TheAlexLichter  3 місяці тому +4

    Thumbnail coming later as I’m not at a computer 🙈
    But you’ll figure what it is about 🤣

  • @matanon8454
    @matanon8454 2 місяці тому +4

    please more about Nuxt security 🙌

    • @TheAlexLichter
      @TheAlexLichter  2 місяці тому

      On my list ✅
      Anything specific you want to hear about?

  • @aeadedoyin
    @aeadedoyin 3 місяці тому +2

    a really insightful watch yet again. thanks Alex.

    • @TheAlexLichter
      @TheAlexLichter  2 місяці тому

      First of all, thanks a ton for your Super Thanks and Donation 🙏🏻
      I'm more than happy that you enjoyed the videos and that they are insightful 🔥

  • @yannmoari
    @yannmoari 3 місяці тому +5

    Another great reminder and very usefull video about the importance of security in front-end frameworks! thanks @alex 🚀✨

    • @TheAlexLichter
      @TheAlexLichter  2 місяці тому +1

      Thank you Yann! The "security" part of FE frameworks sadly often comes too short compared to performance and the "new hotness".

  • @vuetamil
    @vuetamil 2 місяці тому

    Thanks Alex, would be great to hear from you on SSG with Nuxt Generate. Specifically going full static with all api calls done during build time itself.

    • @TheAlexLichter
      @TheAlexLichter  2 місяці тому +1

      Very briefly covered that in ua-cam.com/video/ALQcCDEusjI/v-deo.html already at 16:39 or so but might be good to have another video on it 👍🏻

    • @vuetamil
      @vuetamil 2 місяці тому

      Thxs Alex, specifically Im confused about the need and usage of prerenderRoutes of endpoints for Nuxt SSG generate to avoid fetching again on the client-side. Please refer to my comment on nuxt issue 28313. My previous comment with the link keeps dropping off.

  • @nanaassumadu4997
    @nanaassumadu4997 3 місяці тому +1

    I needed this…thanks a lot

  • @vasiovasio
    @vasiovasio Місяць тому

    1:16 Well, I drink my super hot coffee now in the beginning of the day, and I know the day will be great with - Secert Man! 😂😂😂

  • @brandon9043
    @brandon9043 3 місяці тому +1

    Wow. this was super informative. Thanks

  • @tripv420
    @tripv420 3 місяці тому

    Tl;dw: always test your api security.
    Great video anyway. I've always wanted to import my "secret source" after login so that it's not possible to do research unless you're actually logged into. Something like asynchronous import js files that are protected by the server

    • @TheAlexLichter
      @TheAlexLichter  2 місяці тому

      That's a good one anyway! but also decide what needs to be served through the API and what not
      About the "Secret Source". You could use server components with auth for that too 🤔

  • @valacshiro378
    @valacshiro378 2 місяці тому

    Amazing 🤩

  • @Thr0nSK
    @Thr0nSK 3 місяці тому +1

    Excellent video!

  • @mustafa60x
    @mustafa60x 3 місяці тому

    wonderful..

  • @rrd_webmania
    @rrd_webmania 3 місяці тому

    🎉

  • @taquanminhlong
    @taquanminhlong 2 місяці тому

    Well, just put everything important on the server instead 😂

    • @TheAlexLichter
      @TheAlexLichter  2 місяці тому

      More or less, yes! Though sometimes, "importance" can even be a static text on a "hidden" page that gives info away 👀

  • @mellkam
    @mellkam 2 місяці тому

    nuxt is not a frontend framework, vue is. The problem you described is not the problem of frontend frameworks.

    • @TheAlexLichter
      @TheAlexLichter  2 місяці тому +3

      Don’t worry! The same problems shown apply to a plain Vue/React/Svelte/Angular SPA. No matter if you use a meta framework or not ☺️
      Without SSR, it’ll be even easier to reverse engineer as your debugger will always trigger given that all the code runs in the browser