Once again the cardinal rule of front-end engineering proves true

"never ever trust the client"