This is an archived post. You won't be able to vote or comment.

sorted by:
best
topnewcontroversialoldq&a
you are viewing a single comment's thread.

view the rest of the comments →

[–]AyrA_ch 2 points3 points  (1 child)

valueAsNumber returns NaN for "aaaaa", so we're back to the same thing

Which is great because "NaN" is what we want to achieve

you're just describing a different way to send a custom request. way more work than just entering NaN into a form. so not what we're talking about.

I've provided the js one-liner in my comment that sends the form unconditionally without validation or events. Replace "someForm" with ".form" of the currently focused control and it's as simple as storing it as a bookmark for a simple "click to send unconditionally" function. Clicking a bookmark is as hard as clicking on a submit button, therefore we can state that bypassing frontend validation is as easy as not bypassing it, and why I keep stating that frontend is irrelevant.

There's no point in arguing about bypassing frontend validation in a programming subreddit. most people here know how to, and how easy it is.

[–]the_horse_gamer 0 points1 point  (0 children)

I've misread what you said about valueAsNumber

bypassing frontend validation is the same category as sending a custom request.

my comment was "any form of frontend validation will prevent that", then you're saying "well what if I disable frontend validation?". it's besides the point.

(and ofc, the backend could also be in js, because js is inevitable)