1
0
mirror of https://github.com/vichan-devel/vichan.git synced 2024-12-01 18:47:20 +01:00
vichan/templates/post
8chan 3da946268a SECURITY: Poster IDs could reveal IPs across boards
Imagine the following scenario:

Alice has permission to view IPs on board A, and Bob has permissions to view IPs on board B.

If the post number was to match, and the same IP made both posts, A and B could trade user IPs which they wouldn't normally have permission to do so. This weird bug has already creeped up on 8chan.co and is now patched.
2014-10-07 08:16:21 -07:00
..
file_controls.html Deprecate postControls(), per-file deletion and spoilering 2014-04-30 17:18:35 -04:00
fileinfo.html fix html validity 2014-08-08 23:09:33 +02:00
flag.html add some files missing from the previous commit 2014-04-16 11:58:41 +02:00
image_identification.html Open image identification links in new tabs 2014-08-08 21:59:06 +02:00
image.html Added a space for valid html5 2014-08-08 21:53:00 +02:00
ip.html modularize post templates a little more 2014-04-16 15:01:37 +02:00
name.html Merge https://github.com/vichan-devel/vichan 2014-10-05 18:12:19 +02:00
post_controls.html Fix edit board link not appearing 2014-05-18 21:18:06 -04:00
poster_id.html SECURITY: Poster IDs could reveal IPs across boards 2014-10-07 08:16:21 -07:00
subject.html modularize post templates a little more 2014-04-16 15:01:37 +02:00
time.html modularize post templates a little more 2014-04-16 15:01:37 +02:00