Details
-
Bug
-
Resolution: Unresolved
-
Major
-
None
-
1.12
-
None
Description
It is trivial to determine a channel's unique key, which makes it possible to interfere with a session while it is in progress.
Use `websocket.getDocumentKey` to determine a secret key which will restrict editing to users with the correct permissions.