Meteorjs 模型/集合可在客户端访问.安全问题? [英] Meteorjs models/collections are accessible on client side. Security issue?

问题描述

如何防止用户访问/修改客户端模型/集合?

解决方案

正如 Matt 提到的，不再需要解决方案.然而，作为标准，似乎需要删除自动发布包以保护系统.Meteor 文档涵盖了保护集合的内容:http://docs.meteor.com/#meteor_collection>

How to prevent users from acccessing/modifying client-side models/collections?

解决方案

As Matt mentioned the work around is no longer needed. However as standard it appears the autopublish package needs to be removed to secure the system. The Meteor documentation covers securing the collections: http://docs.meteor.com/#meteor_collection

这篇关于Meteorjs 模型/集合可在客户端访问.安全问题?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！