Giter Site home page Giter Site logo

Comments (4)

paradoxxxzero avatar paradoxxxzero commented on June 25, 2024

Maybe http authentication could allow users to save their password.
As of now there is an hidden feature which makes all text in the url after # being typed in the terminal. You could use it to save the password in a bookmark if you really are crazy :)
http://myserver:57575/user/foo#bar if foo your user and bar your password.

from butterfly.

ysmood avatar ysmood commented on June 25, 2024

@paradoxxxzero Great work!

from butterfly.

oldgregg-zz avatar oldgregg-zz commented on June 25, 2024

There's some code in my SSL patch that would allow users to authenticate their user id through http client certificates. There'd be nothing to stop you from from treating them more like SSH keys, where the certificate is sufficient to log in.

I'd generally shy away from the automatic echoing of text into a session, as you could get into a bad situation where you allow people to execute code on your machine. Consider a link that looks like this: http://localhost:57575/user/youruser#date

This one is benign, only printing the date.

I understand you have the "origin" check in place now, but that sort of check doesn't help if the user accidentally clicks a link from within their butterfly instance.

from butterfly.

paradoxxxzero avatar paradoxxxzero commented on June 25, 2024

Agreed, This was a dangerous feature.

from butterfly.

Related Issues (20)

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.