Security in backbone.js?

Question

I am new to coffeescript (javascript) world. My first backbone.js application is currently being created, which communicates with the Rails backend via SSL.

Over the years, I have been repeatedly told that "JavaScript security is bad, so if possible, run the entire logical server side." I have a server-side security descriptor, but what about the client?

Perhaps some of my base models will contain information that users will want to protect.

Update 1 . In response to @Nupul, I want to protect tuples (integer, string, datetime) . Nothing can compromise any remote system.

Update 2 . So, the only thing you need to know about is to provide the same data that could be considered safe for presentation in the form of js-free html?

Answer 1

JavaScript security, in the sense that you mean, is not just sucking, it is literally impossible. You cannot trust the code that you run on the client. You need to structure your program so that your server never sends information to the client computer if you do not want them to be able to see it.