ashpie/swaf
1
0
Fork 0
Code Issues 22 Pull Requests Releases 11 Wiki Activity

Security: magic links are insecure and should instead ask the user to type a code sent by mail #38

New Issue
Open
opened 2021-06-02 16:42:35 +02:00 by ashpie · 0 comments
ashpie commented 2021-06-02 16:42:35 +02:00
Owner
Copy Link

Magic links currently is subject to involuntary login in attackers.

  1. Attacker request login
  2. User accidentaly clicks on the link
  3. Attacker is logged in as the user
Magic links currently is subject to involuntary login in attackers. 1. Attacker request login 2. User accidentaly clicks on the link 3. Attacker is logged in as the user
ashpie added this to the v0.24.0 milestone 2021-06-02 16:42:35 +02:00
ashpie added the
feature/enhancement
 label 2021-06-02 16:42:35 +02:00
ashpie self-assigned this 2021-06-02 16:42:35 +02:00
ashpie modified the milestone from v0.24.0 to v0.26.0 2021-11-09 19:40:00 +01:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels   
bug

Something is not working

  
duplicate

This issue or pull request already exists

  
feature/enhancement

New feature

  
help wanted

Need some help

  
invalid

Something is wrong

  
question

More information is needed

  
refactor

   
Tests

   
wontfix

This won't be fixed

No Label
bug
duplicate
feature/enhancement
help wanted
invalid
question
refactor
Tests
wontfix
Milestone
Clear milestone
No items
No Milestone
v0.26.0
Assignees
Clear assignees
No Assignees
ashpie
1 Participants
Notifications
Due Date
The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: ashpie/swaf#38
No description provided.
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?