I’m wondering if this is possible and how it would be done if it could.
I don’t have any deep understanding of how browsers render web pages, so I’m thinking a browser will download the HTML and JavaScript and start rendering. Is it possible for someone to interrupt rendering, essentially edit/change the HTML and/or JavaScript?
Or perhaps someone could wget all outward-facing files, save them locally, and run them locally.
In my head, it sounds theoretically possible, and I was wondering what this might mean in terms of web security.
Edit
“Who” being a user viewing the web page on their browser, assuming delivery from server to client and back is secure.
Yes, it is possible. I’m using charles for that ( http://www.charlesproxy.com/documentation/tools/map-local/ ) but it can be done using apache/nginx proxy as well.
You basically have to assume that everything that happens in the browser can be changed by the end user.