Abstract
An analysis of common routing patterns in single-page applications and their security implications.
Methodology
Literature review and controlled lab testing
Findings
Several frameworks leak route metadata in static JS bundles.
Impact
Information disclosure can aid attackers in mapping protected functionality.
Mitigation
Implement server-side authorization checks and avoid sensitive route metadata in client bundles.
Full analysis
Modern SPAs often handle routing client-side. This research examines how route guards, history state, and deep links affect security.