#props-exposure

Initial page props expose sensitive data in HTML source despite lazy configuration

Precise goal Determine whether Inertia.js can guarantee that props wrapped in Inertia::lazy() or Inertia.lazy() are never serialized into the initial #page script tag under any rendering mode. Constraints and uncertainty The framework documentation warns against placing sensitive data in props and recommends lazy evaluation as mitigation. However, lazy props