Skip to content

don't store user IDs in cookies #3

Open
Open
don't store user IDs in cookies#3
Labels
bugSomething isn't working

Description

@ralsei
ralsei
opened on Aug 9, 2018

this allows you to spoof as any user if you bruteforce their ID.

this is bad.

Despacito.

Activity

  1. ralsei
    added
    bugSomething isn't working
    on Aug 9, 2018

  2. armaangoel78 commented on Aug 9, 2018

    @armaangoel78
    armaangoel78
    on Aug 9, 2018
    Member

    Well you wouldn't have known unless I told you

  3. ralsei commented on Aug 13, 2018

    @ralsei
    ralsei
    on Aug 13, 2018
    MemberAuthor

    yeah but

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't working

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions