search

tennitech / juke

Juke, an open-source music player, breathes new life into your music with a retro-inspired interface.
MIT License
2 stars 0 forks source link

Investigate and Prevent Cross-Site-Scripting Attacks #25

Open ImTrevorMartin opened 3 weeks ago

ImTrevorMartin commented 3 weeks ago

We don't really check the origin of requests---especially as we just do a allow whoever cors policy (from what I understand).

Figure out if this is an actual issue (maybe do an attack and write-up!) and fix it if it is.