xiph / awcy

http://arewecompressedyet.com/
MIT License
72 stars 46 forks source link

Prevent non-logged in user from rerunning jobs #159

Closed fijimunkii closed 6 years ago

fijimunkii commented 6 years ago

This can be abused by overloading the queue and potentially injecting dangerous cli command (haven't tested)

tdaede commented 6 years ago

While this is fine, a proper protection would need to be server side. And it turns out the rerun feature uses the same API as normal submission, so it is. This will make the UI more consistent with what will actually happen, though.