1
0
mirror of https://github.com/vichan-devel/vichan.git synced 2024-11-29 09:44:28 +01:00
vichan/templates
8chan 3da946268a SECURITY: Poster IDs could reveal IPs across boards
Imagine the following scenario:

Alice has permission to view IPs on board A, and Bob has permissions to view IPs on board B.

If the post number was to match, and the same IP made both posts, A and B could trade user IPs which they wouldn't normally have permission to do so. This weird bug has already creeped up on 8chan.co and is now patched.
2014-10-07 08:16:21 -07:00
..
8chan Home page for unique IP based featured boards 2014-10-06 18:02:30 -07:00
installer installer: update to font-awesome 3.0 or 4.0 it was 2014-02-20 10:37:15 +01:00
mod Reject repost option in ?/settings 2014-09-24 04:25:55 +00:00
post SECURITY: Poster IDs could reveal IPs across boards 2014-10-07 08:16:21 -07:00
themes add stylesheet choice to catalog theme 2014-10-05 17:49:27 +02:00
attention_bar.html attention bar: cleanup stylesheets 2012-12-24 03:39:47 +01:00
banned.html added option for showing the mod in ban page. 2014-09-01 06:30:33 +08:00
boardlist.html Revert "Merge branch 'master' of github.com:vichan-devel/Tinyboard" 2013-08-05 06:17:01 -04:00
error.html Better error handling/displaying with $config['debug'] and $config['verbose_errors'] 2013-08-03 00:22:28 -04:00
generic_page.html apply new branding for vichan-devel 2014-04-17 17:11:32 +02:00
header.html KATEX 2014-09-21 17:53:50 +00:00
index.html Catalog link in templates, not catalog-link.js; fixes mod.php error 2014-09-27 20:06:11 +00:00
main.js give OPs IDs 2014-10-05 17:49:31 +02:00
page.html indentation 2014-08-10 14:42:57 +00:00
post_form.html Allow the user to decide whether or not he wants to display his country 2014-09-20 16:35:28 +00:00
post_reply.html Fix issue #45 2014-06-24 19:41:00 +00:00
post_thread.html give OPs IDs 2014-10-05 17:49:31 +02:00
posts.sql multiimage posting 2014-04-27 15:48:47 +02:00
report_delete.html I don't know what I did. 2014-09-25 22:53:56 +00:00
search_form.html post search: one more i18n string 2013-07-20 20:41:54 -04:00
thread.html lol spaces 2014-10-03 00:16:41 +09:00