B4J Question b4j_raiseEvent for WebApps - security concerns

Hello everybody,

For a webapp I use b4j_raiseEvent from the b4j_ws.js. Is it not theorethically possible to call any sub in the server code if the corresponding signature is known? Or is there an internal security mechanism that prevents this?

How can I use b4j_raiseEvent safely?

Thank you very much.