Closed EvanHahn closed 1 month ago
A sophisticated bad actor who knows a project's public ID could spam invites to determine whether someone was in a project.
Now, they need the harder-to-get "project invite ID", which is a separate generated value.
Closes #559.
A sophisticated bad actor who knows a project's public ID could spam invites to determine whether someone was in a project.
Now, they need the harder-to-get "project invite ID", which is a separate generated value.
Closes #559.