• petey@aussie.zone
    link
    fedilink
    arrow-up
    5
    ·
    2 months ago

    I love that you’re thinking about how to secure sensitive parts of JS applications, however I wonder what threat this is guarding against. Can you give an example? Surely if an attacker can modify the source to call the sensitive functions, then they could modify the allow list

    • hosaka@programming.dev
      link
      fedilink
      arrow-up
      7
      ·
      edit-2
      2 months ago

      I think it’s is not aimed to protect against potential attacks, this is aimed at a developer using/writing modules of code. This is not a security guard