javascript - AngularJS Securing Service values -

1. in angularjs application when user logs in roles stored in loginservice, have found values editable user through console. how can secure that?

2. what csrf handling?

i have many other security concerns angular/easyrest application, useful link appreciated.

1) if worried editing stored values, can make them private: https://developer.mozilla.org/en-us/docs/web/javascript/guide/closures think best can do, possible edit value if set breakpoint in function have access value. should use server-side checking anyway.

2) if have user data in links, should use $sanitize service before adding data page. https://docs.angularjs.org/api/ngsanitize/service/$sanitize