[rienbdj]

normally security would be implemented at an api level. you would have to be careful to implement that in the renderer here.

[karthikksv]

You're right, there's validation for the WebSocket messages sent to the server. For certain events (e.g. submit), the validation of user form data is left to you, just as you would normally be responsible for.