Skip to content

Comment on AngularJS 1.2.0: timely-deliveryparent

Comments

Never send DB output directly to frontend, send object, filled by only necessary values from DB output. Otherwise you'll meet security issues and these "_" prefixes will be smalles part of your problems.

And how are you supposed to do that using Mongolab, MongoHQ or Firebase?

you seem to be taking as a given that those are acceptable things to do.

And you seem to be implying that they're not okay to do. Feel free to substantiate your opinion.

I do that. It's not about sending them directly. It's the underlying field name. I just keep _id fields as _id fields when I prepare data for output.

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.