search

ywwg / ffagc

Firefly Art Grant Core Website
0 stars 1 forks source link

Missing validation on Vote#score_[t,c,f] #64

Closed Katee closed 7 years ago

Katee commented 7 years ago

A malicious voter (unlikely to exist) could completely skew the totals by submitting a score outside of [0, 1, 2].

ywwg commented 7 years ago

oooo devious

Katee commented 7 years ago

Fixed in https://github.com/ywwg/ffagc/pull/61/commits/ce43cbf51336f2c7714e53ef2a6717577d939f26

Katee commented 7 years ago

Fixed alone (without tests) in a PR https://github.com/ywwg/ffagc/pull/65