Hacker News new | past | comments | ask | show | jobs | submit login

Never trust the client.



Yeah, you can require them to generate a UUID if it helps for your app (e.g. bulk create objects with relationships between them) but then on the server you can generate new UUIDs and return a mapping from old->new to the client.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: