logoalt Hacker News

arcanemachineryesterday at 11:02 PM1 replyview on HN

I haven't dug into this for a while, bit you should be able to define a catch-all event to return a respond to non-compliant requests . It should be built-in to some degree IMO, but I think it's not an unsolved problem.


Replies

sevenzerotoday at 4:45 AM

This will not work if a attacker guesses a function signature correctly as the catch all block usually is at the bottom of the module. If you use atoms in the function signature, attackers can just guess them, even if you never intended that function to be reachable from frontend code.

That being said, I am not forced to use liveview, its just that most ressources nowadays use it.