Hide Attribute from Inspector Devs Tool

Support
#1

Hey There,

Currently using Jmix 2.3.4.
I have a question on how to hide attribute on ‘Element from Inspect’. I am triyng to hide the “upload feature” by disable and hide where it been attach it inside HBox, but can’t get the expected result,
image

While in debugging mode, I noticed that apps did not process the file even after upload it. it is because it is on client-side?

Below screenshot I shared based on third-party pen test result.
image

Either you guys could show a ways to make it disappear or required justification close this issue.

#2

Hi,

Since UI components have a server-side state, any changes made to the DOM tree by “homemade” hackers are ignored by the application. You’ve already noticed this yourself:

The same applies to the disabled buttons. For example, if you do not have permission to create, edit, or remove an entity, then corresponding buttons will appear in a disabled state. However, you can still enable these buttons by removing the corresponding HTML attribute using the browser’s developer tools. Clicks on these buttons will be ignored, though.

There is nothing to be done on our part, if you want to remove an element, then remove it from the parent on the server side rather than hiding it.

Regards,
Gleb

1 Like
#3

Thank you for great explanation.