 <p>It all depends on y our app structure. If the data in the hidden div confidential, then by no means setting it's display to none a secure method since the client has full access to all client side data. But when talking about a button that invokes a back-end behavior, you should also be doing back-end validation on all requests.</p>