[Catalyst] RFC: HTML::Widget / Ajax / Catalyst

[Nilson Santos Figueiredo Junior]

On 5/4/06, Brandon Black <blblack at gmail.com> wrote:
> Even with client-side validation, in most cases you still want
> server-side validation too, especially if the validation has security
> implications (as anyone can modify/bypass your client-side JS and send
> direct responses to the server themselves).

I didn't consider scraping server-side validation at the final "post"
for a second Client-side validation is just a means of improving user
experience not actual security. The thing is that some constraints
would need server-side pre-validation (i.e. callback based
constraints).

-Nilson Santos F. Jr.