Client Security Issues (Javascript)

Question

We are going to develop and implement a user interface for a large website. The site owner is really careful about security issues. I wonder if there is a checklist for client-side security recommendations when designing and coding in Javascript.

Answer 1

You can use the OWASP manual as a launch. It offers a set of tests that you can systematically use to check your application for common vulnerabilities.

Testing your web application pen is the sound word for what you are trying to achieve. Network scan for automatic tools and reference information.

Edit:

You mentioned that not only the client side is your problem, but also the general security of the entire application, including the server. My advice will be that if you have never done an app security assessment, your boss / site owner should probably consider hiring an outside company / consultant to work with. They will do the job less than it would probably be worth if you and your team had to learn the details first. In addition, they have the advantage that this is done over and over again, so they are much less likely to ignore important details.

Answer 2

Javascript can be easily fooled. You need to create a system on the server side, and all security and the client side will only act as an interface similar to a browser.

Encryption using a strong security certificate will also be an option that you can consider.