osminogin / tornote

Self-destructing notes on Go with tiny secured client-side
https://tornote.herokuapp.com
GNU Affero General Public License v3.0
28 stars 15 forks source link

Add read button to stop link previewers breaking, fix xss in notes #9

Closed jaydn closed 3 years ago

jaydn commented 3 years ago

I am forking this but thought I would push the non-contentious changes upstream first This addresses 1 item of #8

I've also fixed ability to put HTML in the notes as it allows XSS If you actually want this feel free to undo but for me it was just extra attack surface

Cheers

osminogin commented 3 years ago

Hi! Thanks for your intererest. I will try to bring these changes in as soon as possible.

Part of the improvement work started in the in v2 branch in this repo, but had to be postponed.

osminogin commented 3 years ago

Merged. Thanks!