From: barmar@alum.mit.edu   
      
   In article <47e86ec9-e62d-4868-a9c1-8fd4e30f78d5@googlegroups.com>,   
    herrmannsfeldt@gmail.com wrote:   
      
   > There is a Java rule that applets are only allowed to make   
   > TCP connections to the server that they were downloaded   
   > from.  I don't know if that applies to Javascript.  However, that   
   > restriction is handled by the browser, so the user can, theoretically,   
   > change it.   
      
   Indeed, any truly reliable input validation must be done by the server.   
   Client-side validation is just for improving the user experience.   
      
   If the site the OP referred to only does its bad word filtering on the   
   client, he can probably defeat it simply by going into the browser's   
   Development Tools.   
      
   --   
   Barry Margolin   
   Arlington, MA   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)