3 ms·
Nice and simple, I like it. Potential security/privacy issue though: I can retrieve anyone's submission(s) with some simple cookie manipulation. I suppose this
by kayge 13y ago
Nice and simple, I like it.
Potential security/privacy issue though: I can retrieve anyone's submission(s) with some simple cookie manipulation. I suppose this is a side-effect of the "no logging in" method, but it might be nice to allow people to delete their posts.
- Jamsii 13y agoI'm a collaborator on the project and we're tidying up all these loopholes, but thanks for the heads up. Matts response is "Oops, I’m a designer!".
- kayge 13y agoHaha, cool. There's another similar issue (which your team may already be aware of) that I'd be happy to point out less-publicly if you want to send me an email. Anyway, nice project!