Is there a way to prevent data from being wiped in PWA?


Jason Cochran

Let's say I have a client that spends a lot of time and money creating a custom database. Therefore, additional data security is required. They are concerned that if the information in the database is allowed to be accessed from a normal web application, that information may be deleted. A secure login is not enough. Someone can log in and scrape the data. Just like any other web application, PWAs are not immune to this.

My overall opinion is that a hybrid app must be installed to better protect sensitive data. For this project I lean towards React-Native or Ionic.

am I wrong? Is there a way to protect the data from being scraped by the PWA?

Alexander Trakhimenok

Regardless of the technology, there is no way to protect the data visible to the browser client through simple HTML or PWA/hybrid applications.

Although you can increase the difficulty.

  1. Enforce limits on how much information a client can get per minute/hour/day. The one that exceeds the limit can be blocked/sued/whatever.

  2. You can return some data as an image instead of text. This makes the extraction process more difficult, but complicates your application and uses more bandwidth.

If we're talking about native/hybrid applications, more layers can be added to make it more secure:

  • Use HTTPS to connect and enforce a valid certificate check.
  • It's better if you can check for a specific certificate so it's not replaced by a man-in-the-middle.

I would guess that iOS apps are more secure than Android because Android is easier to decompile and run modified versions with removal restrictions.

Again, rate limiting seems to be the most cost-effective solution.

In addition to rate limiting, you can also add some kind of mode limit. For example, if a client requests data at regular intervals close to the limit, it can be considered logical that the request is coming from a robot and data is being discarded.

Related


Is there a way to prevent data from being wiped in PWA?

Jason Cochran Let's say I have a client that spends a lot of time and money creating a custom database. Therefore, additional data security is required. They are concerned that if the information in the database is allowed to be accessed from a normal web appl

Is there a way to prevent data from being wiped in PWA?

Jason Cochran Let's say I have a client that spends a lot of time and money creating a custom database. Therefore, additional data security is required. They are concerned that if the information in the database is allowed to be accessed from a normal web appl

Is there a way to prevent data from being wiped in PWA?

Jason Cochran Let's say I have a client that spends a lot of time and money creating a custom database. Therefore, additional data security is required. They are concerned that if the information in the database is allowed to be accessed from a normal web appl

Is there a way to prevent data from being wiped in PWA?

Jason Cochran Let's say I have a client that spends a lot of time and money creating a custom database. Therefore, additional data security is required. They are concerned that if the information in the database is allowed to be accessed from a normal web appl

Is there a way to prevent data from being wiped in PWA?

Jason Cochran Let's say I have a client that spends a lot of time and money creating a custom database. Therefore, additional data security is required. They are concerned that if the information in the database is allowed to be accessed from a normal web appl

Data is being wiped when the browser is closed.

Mahmoud Adam I have a gamepad that stores game results and I can't figure out why the data is cleared after closing the browser (entering game results via the dropdown menu). Is there a way to make my results persist as long as the server is running? The resul

Is there a way to prevent a class from being reflected?

Mixture: I'm writing a cryptography class while teaching myself Java's security api. This class will contain some sensitive content like encryption type etc. All of this can be found reflectively by someone's motives. I've used reflection before to get around

Is there a way to prevent a class from being reflected?

Mixture: I'm writing a cryptography class while teaching myself Java's security api. This class will contain some sensitive content like encryption type etc. All of this can be found reflectively by someone's motives. I've used reflection before to get around

Is there a way to prevent parts of the string from being printed?

kisbovan93 I need to store some data at the end of the string, but for the rest I want the user to be able to see it (except at the end). Does this make sense, or can I do this somehow (in C#)? Wheat base Why not create a special String class? public class MyS