search

dmitry-solomadin / skwibl

Realtime collaboration service.
http://skwibl.com
1 stars 0 forks source link

Check some user-generated values on the server side. #196

Open yuri-karadzhov opened 11 years ago

yuri-karadzhov commented 11 years ago

We should not trust user-generated values like canvasId and elementId.

yuri-karadzhov commented 11 years ago

I postponed the rest of this task to v1. We need to restructure client code first. At the end we should have canvas variable per socket which is current user canvas and have clear socket events with all necessary data.