I have a react.js application form that receives input. The validation is done in the client side code. Use webpack to bundle all the client side .js into a single bundle.js file. The .js is minified and obfuscated. Is it still required to do server side input validation?

Using Material UI for the form elements.

Can somebody still manipulate that client side react.js code or form elements to manipulate validation?

CodePudding user response：

For sure you will need the server-side validation.

The data from the client to the server is passed through a Rest or GraphQL API, I can copy the request from chrome and replay it with curl, insomnia, postman or any other request tool, changing the parameters and also injecting malicious code into your application.

Please, validate any user input at the backend side too.