← Back to context

Comment by Closi

6 days ago

oop found a security issue - you can abuse profile pictures to upload any file (e.g. to host malware if you were a bad actor!)

IMO don't think this is ready for production use in the slightest - but cool project!

3 comments

Closi

Reply
henryball  5 days ago

This has been patched - thanks for flagging!

  • Closi  3 days ago

    Not a bug necessarily, but one of the key features of trello is multi-user editing which doesn't seem to work.

    i.e. if I open two tabs, and edit one tab, the other tab doesn't update and visa-versa until refresh.