Část 2·před 84 d
Minification and encoding do not make JSON secure. Values placed in a URL can appear in browser history, referrer headers, proxy logs, analytics and screenshots, and URL length limits make the transport fragile. Validate syntax, schema, depth and decoded size, then send sensitive or substantial payloads in an authenticated HTTPS request body. If intermediaries must not read the content, use an established authenticated-encryption protocol with proper key and nonce management. Never treat Base64url as confidentiality.