Security for SPA
Security issues are not unique to SPAs, It's just that the user is making the requests rather than your JavaScript, and that the results are in HTML rather than JSON or some data format. In a non-SPA, you have to secure the individual pages on the server, whereas in a SPA app you have to secure the data endpoints.
Learn More