joshsoftware / joshsoftware/lingo.ai
Able to access the data through link without login
Open
- Dominant language
- Python
- Stars
- 1
- Forks
- 3
- PR merge metrics
- No merged PRs in 30d
Description
https://github.com/user-attachments/assets/3d713b54-278f-40f1-8531-ce61b8feba66
So the user can access the file even without login in or being the user
Contributor guide
No contributing guide indexed for this repository
Research direction
Start by reproducing the linked file access while logged out and as a different user, then trace which endpoint serves the file and where authorization is checked. Done means unauthenticated and unauthorized users can no longer access the data, while the intended user still can.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- authorization, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100