Is Redux Safe?

I am learning Redux and I see people who store all kinds of information in the state and do all kinds of different operations with reducers. But is Redux safe or are there any known vulnerabilities in using Redux? If there are any best practices that I can follow to ensure the state?

+3


source to share


2 answers


Is it not recommended save passwords and confidential information in your redux store. When you go into production, definitely disable the redux-devtools option , because if you don't, everyone will be able to see your app state using the chrome extension (if you want to hide your app state). You have to be especially careful if you sync your state with something like local storage. In general, send passwords or sensitive information directly to the server in an encrypted manner.



+2


source


Maybe let me change the question - is it safe to store any data on the client side? And the answer is no. Any secret data should never exist on the front side. The government control system will not change the security of the application. Even if you have encapsulated state, the data can be caught by watching the network and data flowing into the browser, or by traversing the html, because most of the data on the front is just used in the view. Thus, indeed, any data that enters the browser should be considered completely transparent, and only the backend can truly provide what is given and what is not.



+1


source







All Articles