If you rely on mac addresses , processor ids , or cookies , remember that they are essentially self - reported by an untrusted client 如果您依賴于mac地址、處理器標(biāo)識或cookie ,請記住它們本質(zhì)上是由一個不可信的客戶機自我報告的。
If you are concerned about this type of attack , which is easily prevented through code inspections , you can prevent untrusted clients from connecting to the web container 如果您擔(dān)心這種類型的攻擊(可以通過代碼檢查輕松地加以防止) ,則可以阻止任何不受信任的客戶端連接到web容器。
This option is often better than the alternatives . storing session state in the client using http cookies or hidden form fields has significant security risks - it exposes a part of your application internals to the untrusted client layer 在客戶端用http cookie或者隱藏表單字段存儲會話狀態(tài)有很大的安全風(fēng)險它將應(yīng)用程序的一部分內(nèi)部內(nèi)容暴露給了非受信任的客戶層。