Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

I can be admin from localStorage in the group, could this be a vulnerability? #32

Open
mertcanaltin opened this issue Dec 4, 2023 · 3 comments
Labels
discovery vulnerability security vulnerability

Comments

@mertcanaltin
Copy link
Member

When I make isAdmin true from local storage, I can give early show result, will this lead the system to an undesired behavior? @armagandalkiran

@hanifisenturk
Copy link
Contributor

Hey! @mertcanaltin, what are your thoughts on using encrypted local storage? I believe the Crypto API can handle that situation. While role data can be stored in a database, this approach may help reduce the vulnerability level.

@mertcanaltin
Copy link
Member Author

Hey! @mertcanaltin, what are your thoughts on using encrypted local storage? I believe the Crypto API can handle that situation. While role data can be stored in a database, this approach may help reduce the vulnerability level.

Thank you very much for your suggestion, @armagandalkiran had mentioned a development about this, we thought that we could solve this situation with the credential of the users, but this idea can of course be in this idea

@mertcanaltin mertcanaltin added the vulnerability security vulnerability label Dec 5, 2023
@armagandalkiran
Copy link
Collaborator

armagandalkiran commented Dec 6, 2023

Hi! I think RBAC needed for this development. So a little more planing needed for here may be we can add this on phase 2. Thank you!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
discovery vulnerability security vulnerability
Projects
None yet
Development

No branches or pull requests

3 participants