Forum Discussion

ganeshbonde's avatar
ganeshbonde
Copper Contributor
Dec 20, 2020

Dev tools should not let us edit the source code & send request for any website(Prototype Pollution)

Hi,

    According to me, dev tools should not allow us to change the source code  and send request to just any website. It is a defect. This feature should be disabled. 

   The Dev tool should not allow us to edit the source code of any website because it causes prototype pollution. The person who uses the dev tool for any browser should be allowed to edit only the code of the website which he/she is developing. 

   For example, we can let the user edit code if the server is hosted locally while developing the website. Secondly we can use certificate key concepts where we can authorize a machine to edit the code for development purposes only. Other then that we should not allow the browser's user edit the code using dev tools to commit a cyber attack.  This will make the code less vulnerable.

  • HotCakeX's avatar
    HotCakeX
    MVP
    Dec 20, 2020

    ganeshbonde 

     

    You do realize that the dev tool only edits the resources loaded in your browser, right?
    you can't edit resources on the server with dev tools.

     

    Edge browser defect? what!? every browser has dev tools!

     

    there is no source editing. web servers are protected using security protocols.

     

    I suggest you read and do research about Dev tools, web servers and security aspects of them.

Resources