Repository navigation
Docs Pro-Tips Whitelist possible flaw? #226
Description
http://raven-js.readthedocs.org/en/latest/tips/index.html
If it's parsed as regex, wouldn't the example whitelist also match yourexample.com, which could be registered by a completely different person?
Activity
mattrobenolt commentedon Jul 11, 2014
Yeah, you're right. :) I'll fix.
robinwassen commentedon Aug 22, 2014
I would close this issue as won't fix, because it can't be exploited for anything at all.
And if someone as a script kiddie want to go around the check on his own client, well, just modify the whitelist instead of including stuff from other domains.
mattrobenolt commentedon Aug 22, 2014
Yeah, it doesn't really matter. It has nothing to do with authentication or anything like that. It's all backed by authentication on the server. This whitelist is just to block out noise from errors that you don't care about. --
Sent from Mailbox
On Fri, Aug 22, 2014 at 12:30 PM, Robin Andersson
notifications@github.com wrote:
Updated regular expression example for tips
Simplify context methods to fall back on instance-global context (#226)
feat(replay): Upgrade rrweb packages to 2.31.0
feat(replay): Upgrade rrweb packages to 2.31.0
feat(replay): Upgrade rrweb packages to 2.31.0 (#14689)
chore: Fix typo in readmes (getsentry#226)