mirror of
https://github.com/matze/wastebin.git
synced 2026-04-25 16:45:59 +03:00
[GH-ISSUE #14] Anyone can delete the paste #10
Labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
starred/wastebin-matze#10
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @vitobotta on GitHub (Jan 26, 2023).
Original GitHub issue: https://github.com/matze/wastebin/issues/14
Hi, I just noticed that anyone with the link can delete the paste as there is no restriction at all. Is this intentional?
@matze commented on GitHub (Jan 26, 2023):
Yes, because there is no authentication mechanism in place. But I could set a cookie to allow deletion only from the browser that made the paste. But I am not sure if that would then require a pesky cookie banner which I'd like to avoid if possible.
@vitobotta commented on GitHub (Jan 26, 2023):
The cookie would work well I think
@matze commented on GitHub (Jan 26, 2023):
I am not a lawyer but from what I can tell, purely functional cookies that require a site to function do not imply a cookie banner. So good chance I will start implementing this soon.
@vitobotta commented on GitHub (Jan 27, 2023):
That's awesome @matze - looking forward to it :)
@matze commented on GitHub (Jan 27, 2023):
I've pushed a branch that I will likely merge tomorrow. Works alright so far.