How much data is exposed when selecting "Include all relation columns" in form view?

[Paul_Danyliuk]

Here’s my answer for a similar topic, it still stands.

TL;DR: you’re exposing all of it. So you probably shouldn’t include formulas or relations in your forms, and should not enable those toggles.

Security of personal data in published forms

TL;DR: Commendable effort but it solves nothing. The “Update your data” form is insecure because you had to enable “Include lookup data” for the formulas to work, and that included the whole table of Personal Data (and also of the Updated Personal Data) in the shard that gets sent to the client where any attacker can crack it easily: [image] So, the only way to publish the form securely is to not include any existing data, no formulas or whatnot — only the fields to fill out. At that point…

Here’s your form shard. It exposes 12 tables.

There’s a table with 1002 rows of what looks like personal data:

There’s her password:

Should I continue?