search

scripting / nodeStorage

A simple storage system based on Twitter identity implemented in Node.js.
GNU General Public License v2.0
103 stars 9 forks source link

Security: nodeStorage publicly shows open sockets #2

Open ePirat opened 8 years ago

ePirat commented 8 years ago

nodeStorage has an opensockets endpoint which allows everyone to see open sockets (connected users) to the server, which can be a huge privacy problem.

This endpoint should be removed or properly protected.