检查javascript的完整性，用户代码=服务器代码

Question

有没有办法验证用户在使用客户端页面时是否使用Firebug更改了jQuery / JavaScript？

Answer 1

No, there is no way to verify this.

When it comes to input from the browser, you should always verify and validate. Never trust the client .

Answer 2

不。客户从根本上说不安全，属于用户，而不属于您。

Answer 3

Short answer it doesn't matter.
Long answer:
It matters if you are treating the JavaScript as part of your application structure, similar to how a SQL injection attack does bad things to your system. You should validate that anything that gets passed from the client is sanitized before being stored. The interesting attack vector here is if you allow me to persist elements into the structure of the web page and retrieve them at a later time. You have opened the doors to a reflected XSS attack (one of my favorites). This is indicative of a failure to sanitize user input and/or a failure to separate concerns UI from the system level code.