Address isn't 100% private
Open
good first issue
- Dominant language
- JavaScript
- Stars
- 1.8k
- Forks
- 776
- PR merge metrics
- No merged PRs in 30d
Description
**Describe the bug**
Even if a user set the `Hide my wallet address` option to `true` under the profile privacy settings, the address can be easily unveiled through a GET request
**To Reproduce**
You can get any user ETH address by doing a GET request to `https://gitcoin.co/tip/address/`
**Expected behavior**
~~Remove the `/tip/address/` endpoint and change the logic for sending tips on `/app/assets/onepager/js/send.js` so user address lookup is performed on the backend when sending a POST request~~
Contributor guide
Assessment
This issue has not been assessed yet.