Skip to content

Commit 4efd9fd

Browse files
committed
add note about ssr
1 parent 4d97f52 commit 4efd9fd

File tree

1 file changed

+5
-1
lines changed

1 file changed

+5
-1
lines changed

src/v2/guide/security.md

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -157,6 +157,10 @@ Beyond the recommendations made above for [Potential Dangers](#Potential-Dangers
157157

158158
Then use what you learn to also review the source code of your dependencies for potentially dangerous patterns, if any of them include 3rd-party components or otherwise influence what's rendered to the DOM.
159159

160-
### Backend Coordination
160+
## Backend Coordination
161161

162162
HTTP security vulnerabilities, such as cross-site request forgery (CSRF/XSRF) and cross-site script inclusion (XSSI), are primarily addressed on the backend, so aren't a concern of Vue's. However, it's still a good idea to communicate with your backend team to learn how to best interact with their API, e.g. by submitting CSRF tokens with form submissions.
163+
164+
## Server-Side Rendering (SSR)
165+
166+
There are some additional security concerns when using SSR, so make sure to follow the best practices outlined throughout [our SSR documentation](https://ssr.vuejs.org/) to avoid vulnerabilities.

0 commit comments

Comments
 (0)