3 ms·

I really like the idea but I also have some concerns about people uploading random files to your dropbox. The idea with the password/access token is a good firs

I really like the idea but I also have some concerns about people uploading random files to your dropbox. The idea with the password/access token is a good first step but I was surprised to see the password in plaintext in the url after you login... Besides that it looks someone claimed your signin page as a username.

ErikHuisman 13y ago
Do you mean the access_token en udid? This is how oauth works. It would be nice though if he did an extra redirect after successful connect.
- LeoHexspoor 13y ago
  No I mean if you secure your dbinbox via the settings with a password. If you then login to that dbinbox you get the following url: http://dbinbox.com/xxx?password=myplaintextpassword http://dbinbox.com/xxx?password=myplaintextpassword
  - christiangenco 13y ago
    Ahh yeah. The idea behind that was that you could just enter the URL with the password and skip a screen. If you'd like to implement a better password authentication system, I'd be happy to accept your pull request.