prevent zkau to get value from textbox

answered 2022-12-05 14:57:12 +0800

MDuchemin
2480 ● 1 ● 6

Hey there,

There is one main way to protect transit data, and it's https.

The zkau payload can be encrypted by communicating over a secure connection. This will prevent other actors from being able to read the content of the request.

Regarding the browser developer tools: The developer tools have the same level of access as the user, so devtools will always have access to the request information by design, in the same way that devtools will have access to the DOM tree in the page. This is not a bug nor a safety issue.

What is your use case? any specific reason why you want to prevent devtools from seing the request payload?

If this is an absolute requirement, you could make your own encoder at JS side / decoder at Java side to obfuscate the data, however, since that would run on the browser's JS engine, it basically just push back the ball one step, since instead of lookup at the values in the network panel, someone with devtools could just use the JS debugger to inspect the encoder, so that doesn't feel particularly helpful.