Anyone can delete the paste

[vitobotta]

Hi, I just noticed that anyone with the link can delete the paste as there is no restriction at all. Is this intentional?

[matze]

Yes, because there is no authentication mechanism in place. But I could set a cookie to allow deletion only from the browser that made the paste. But I am not sure if that would then require a pesky cookie banner which I'd like to avoid if possible.

[vitobotta]

The cookie would work well I think

[matze]

I am not a lawyer but from what I can tell, purely functional cookies that require a site to function do not imply a cookie banner. So good chance I will start implementing this soon.

[vitobotta]

That's awesome @matze - looking forward to it :)

[matze]

I've pushed a branch that I will likely merge tomorrow. Works alright so far.