title: concerned about security of data-* attributes?
body: <p>i just started using data-* attributes to store custom attributes and values needed to View.  for example . </p>
  
  <pre><code>&lt;div id='someId' data-ItemValues='SomeValues'&gt;
  &lt;/div&gt; 
  </code></pre>
  
  <p>based on the <code>data-*</code> i am doing some operations (CRUD) . what if user changed data-* attributes value in client side (ie from browser using firebug and some other developer tools)  ? 
  i just want to know, is there any standards we need to follow or  want to know how community handle this scenario.</p>
  
  <p><strong>Update :</strong> </p>
  
  <p>i will validate in serverside also. but in some scenario. data is not stored in server. it will be in mark up. it will save only when user will hit save button. </p>
  
  <p>i will pick the data, from javacript and use ajax to send values to the server. but my concern is that if user changed the values in data-* attribute, such that even server side validation will meet the rule to pass. then how do i prevent them ? </p>