Skip to content
This repository has been archived by the owner on Jan 30, 2018. It is now read-only.

Hide people's data exports #39

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

sunny
Copy link

@sunny sunny commented Feb 6, 2012

Without this patch, you can see other people's data exports, e.g : https://teambox.com/datas/2336

@sunny
Copy link
Author

sunny commented Mar 8, 2012

May I add that this is a live security hole ?

Anybody can see the list of data exports from other people's account. The "space150 scrum" project I'm referring was probably made by @space150 and by poking into other export ids you can get to a lot of exports : https://teambox.com/datas/1045 https://teambox.com/datas/1045 https://teambox.com/datas/1985 https://teambox.com/datas/2009

@sunny
Copy link
Author

sunny commented Oct 4, 2016

Cough.

@sunny
Copy link
Author

sunny commented Nov 14, 2017

Yearly cough.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant