5 ms·
It doesn't seem to be.
by alwayslikethis 2y ago
It doesn't seem to be.
- pcthrowaway 2y agoDo you have an example? As per their docs, they do put the encryption key after the '#': https://github.com/cryptpad/cryptpad/blob/main/docs/ARCHITECTURE.md#encryption https://github.com/cryptpad/cryptpad/blob/main/docs/ARCHITEC...
- alwayslikethis 2y agoOh, I wasn't aware that slashes can follow the #. In that case it seems to be. Thanks for the correction. So the only concern here is injecting js to exfiltrate the key then.