CHSCodeForChange / Sapphire-Web

The website/backend repository for Sapphire, a platform to help organizations manage volunteers.
https://sapphire-web.herokuapp.com
GNU General Public License v3.0
8 stars 2 forks source link

Alert Security Bug #123

Open armaangoel78 opened 6 years ago

armaangoel78 commented 6 years ago

The alerts system uses IP address when the user is not authenticated. The ip address we get really only gives the user's network so its not secure (theoretically anyone on that netowrk can see the alerts. However this is only when not logged in, so the alerts are not that sensitive and there are only a few of them.