I know that Javascript is an incredibly unsecure way of programming a persistent game, where for instance you are doing battle calculations in an RPG and then award XP through l
Unfortunately, HTML5 doesn't change these basic properties in any way. So no, you have to do it all server-side.