We have some forms that are using the information passed to it with a querystring in the browser. We are currently trying to find a way to hide or make the address bar read-only so that users cannot change the information in the querystring. Does anyone have any insight on this?
Question
Question
Answer
Modern browsers no longer allow the address bar to be hidden. This is to reduce the ability of a malicious website to trick users into thinking that they are somewhere they aren't.
One of the downsides of browser based applications is that once the user can see it, it's all in clear text. The address bar, F12, and view source are all going to bypass any obscurity you might use.
What exactly are you trying to prevent?
We are trying to prevent the ability for a user to change a value being passed in the URL to LF Forms, which it uses to perform a lookup.
I suppose you could be sneaky about it and embed the form in an IFRAME. Even if it was an empty HTML page that had the IFRAME as the only content. The user would only see the URL of the containing page. You could still manipulate things if you knew what you were doing, but it would probably stop most people.
Replies
Just to let you know that if a user is smart enough to understand changing and/or understanding variables in a querystring in the location bar then that user is smart enough to know how to get around the read-only as well.
This is something you may not really be able to do.
I believe some browsers have allowed you in the past to set up a separate version of the browser that displays the site just like it's a standalone application and has no address bar, but in that situation, you would not be able to open up a custom link like that.
I am interested to hear though if you find something that works for this. I definitely know people would like to hide things they pass as URL's.