Pilih CSR (Client Side Render) atau SSR (Server Side Render) untuk website?

#	Security Aspect	CSR (Client-Side Rendering)	SSR (Server-Side Rendering)
1	Exposure of Business Logic	❌ Business logic & API interaction ada di browser → bisa dicuri, dipelajari, di-manipulate	✅ Logic tetap di server → lebih sulit direkayasa
2	Data Sensitivity	❌ Semua data dikirim via API → bisa di-inspect	✅ Hanya hasil HTML dikirim → data sensitif tetap di server
3	API Key/Secrets Safety	❌ Jika keliru, keys bisa bocor di FE	✅ Semua secret aman di server
4	Attack Surface	❌ Endpoint API banyak & terbuka	⚠️ Fewer endpoints but still must be secured
5	XSS (Cross-Site Scripting)	⚠️ Rentan karena full DOM di browser	⚠️ Tetap bisa terjadi kalau sanitasi buruk
6	DDoS Impact	🟢 Lebih kuat → beban berat ada di client	🔴 Sangat rentan → rendering dilakukan tiap request
7	SEO Injection / HTML Tampering	⚠️ Bisa di override via DevTools	🟢 Sudah pre-render → lebih aman
9	Authentication	⚠️ Banyak butuh localStorage/sessionStorage → bisa dicuri via XSS	🟢 HTTP-Only Cookies lebih aman, Session validated server-side
10	Role + Access Control	❌ Logic di client bisa di-bypass	🟢 Full access control di server

Apa itu CSR dan SSR 📚