algora-io / algora-io/algora

Feature Request: Security on the profile page

Open
#210 3 comments 1 reaction 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
Elixir
Stars
1.5k
Forks
152
PR merge metrics
No merged PRs in 30d

Description

Hey Zafer,

I sent in an application to ComfyUI from your preferences page here and it seemed to go through: https://algora.io/profile/zcesur. All I had to do was click "Apply" and then "Confirm".

"Save Preferences" requires a confirmation code sent over email, but job applications don't!

I didn't send them a Resume, but I did have to give them a start date so I told them you could start next week. Hopefully that works for you.

I'd suggest a fix, but that page is, somewhat confusingly, hosted on the closed source AlgoraCloud layer.

Cheers.

(I did not actually expect the 'Confirm' button to send it in, I assumed it would send a request for an email confirmation. I did not have any intention of actually sending it, only poking you as part of my quick look into #209 )

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by reviewing the profile page at https://algora.io/profile/zcesur and the related investigation in #209. The issue identifies the closed-source AlgoraCloud layer as the relevant entry point, but names no repository files or tests; done would require defining and implementing an appropriate confirmation flow for job applications.

Written by the indexing model from the issue text.

Assessment

Domain
security
Issue type
Bug
Difficulty
5/5
Estimated time
Over a week
Activity status
Quiet
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.