search

0PandaDEV / Ziit

The Swiss army knife of code time tracking.
https://ziit.app
GNU Affero General Public License v3.0
4 stars 0 forks source link

Reliance on client side timestamps #22

Closed obvTiger closed 5 days ago

obvTiger commented 1 month ago

The server blindly trusts the timestamp sent by the client at multiple locations. This could be abused for future date records and timeline manipulation

0PandaDEV commented 3 weeks ago

I don't think this can be fixed because if the timestamp for a heartbeat would be inserted on the server it may be a wrong time because it doesn't factor in latency. On top of that, would it make the offline heartbeat/send later feature in the VS Code extension completely useless.

0PandaDEV commented 5 days ago

Same problem as mentioned before and in #24