search

Volafile / volafile-bugs

Volafile.org public bug tracker
17 stars 2 forks source link

Arbitrary username on upload #111

Closed 74togo closed 9 years ago

74togo commented 9 years ago

https://volafile.io/rest/getUploadKey?name=anon3♂♂♂&room=BEEPi

Shouldn't this be checking the name parameter for validity?

NestorVola commented 9 years ago

No, it shouldn't. Validating sanity of user inputs is for faggots.

laino commented 9 years ago

fix'd

NestorVola commented 9 years ago

Fixing bugs is for faggots. The real lain would have just disabled usernames.

laino commented 9 years ago

Wrong. The real Lain would've disabled uploading, then banned ptc.

Too bad vola got taken over by the NSA already, who actually fix stuff.