search

parthsdoshi / MediaQ

MediaQ: a easy no-login, no-fuss media queue.
http://mediaq.parthdoshi.com
1 stars 1 forks source link

make backend add displayname to rowdata #29

Closed master3243 closed 6 years ago

master3243 commented 6 years ago

right now anyone can put anybody else's name as displayname in rowData which means "added by" cannot be trusted unless backend does it.

parthsdoshi commented 6 years ago

Closing since there's no real security right now anyways.