medium10 pts · first answer countsweb-securityaccess-controlnextjs
Next.js Server Action without a check
A Next.js Server Action deleteUser(id) is only used from an admin page. It has no auth check inside. Is that safe?
Discussion 0
Join free to post in the discussion.
Related questions
- Where to keep a secret keyFull Stack Developer
- What HttpOnly doesFull Stack Developer
- useState in an App Router pageFull Stack Developer
- Renaming a secret to NEXT_PUBLIC_Full Stack Developer
- What HTTPS protectsFull Stack Developer
- Caching a bank statement pageFull Stack Developer
- Making a route publicFull Stack Developer
- What a layout doesFull Stack Developer