Hacker News new | past | comments | ask | show | jobs | submit login

If it's not a password my code should see, I would rather it not be entered into even my client side code. That makes it potentially accessible should I have a bug, eg XSS.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: