I’d hate to build an entire application to only have it hacked.
I am using Firebase and Expo. I know about security rules for Firebase but is there any rules I need to abide by for the JavaScript within React Native/Expo?
Like, is there anyway a user can just change my javascript code and use it against me? I’ve heard about runtime attacks but I don’t know if people can do that in a mobile app like they can in a browser. I’ve seen where a user/attacker can literally just change variables and turn it into code that sends application data to the attackers server but I don’t know how that works.
An attacker could change js code on desktop and mobile. You can use Obfuscation to make it more difficult. Something like react-native-obfuscating-transformer.
I’ve seen where a user/attacker can literally just change variables and turn it into code that sends application data to the attackers server but I don’t know how that works.
Do you mean XSS Attacks? Such a case that a normal user send data to an attacker's server is mostly a xss attack. (Here an example). But this would be an other topic