JSONP Security Point of View Questions Are You Safe?

I have a question about JSONP security, so I am asking the first question.

Situation

The above situation is the current development situation and I have two questions from a security perspective.

Question 1. JSONP is basically the same principle as checking by GET method. Is there a security problem? I just need to change the parameters.

json jsonp security

2022-09-22 22:01

1 Answers

What you see through the fiddlers is registering proxy, It's a certificate generated by Fiddler that replaces https processing. (Originally, connect to A.com, connect to localhost:8080, and then connect to A.com instead.

If you don't do any special processing here, the browser can bounce you saying you accessed it with an untrusted certificate, which Fiddler will force you to do.

As a result, Fiddler intercepts in network so that you can see the data even though it is HTTPS.

If you intercept it outside the network, you can only see encrypted data as you know it.

2022-09-22 22:01

If you have any answers or tips

Popular Tags

python x 4647

android x 1593

java x 1494

javascript x 1427

c x 927

c++ x 878

ruby-on-rails x 696

php x 692

python3 x 685

html x 656