When client-side validation attacks

Internet

Step one: Being asked for an address by StarTrack.

Step two: Entering a postcode, and getting a list of suburbs.

Step three: Selecting and autofilling a suburb from the dropdown.

Step four: Can’t progress because the autofilled value doesn’t pass client validation, so use Inspect Element to override so you can submit the form!

I understand the need for validation, and appreciate these auto-fill address fields must have drastically decreased errors. But wow they’re brittle.

Author bio and support

Me!

Ruben Schade is a technical writer and IaaS engineer in Sydney, Australia who refers to himself in the third person in bios. Wait, not BIOS… my brain should be EFI by now.

The site is powered by Hugo, FreeBSD, and OpenZFS on OrionVM, everyone’s favourite cloud infrastructure provider.

If you found this post helpful or entertaining, you can shout me a coffee or buy some silly merch. Thanks!