theis/webspeaker
Watch
1
2
Fork
You've already forked webspeaker
 1
Code Issues 41 Pull requests Projects Releases 18 Packages 5 Wiki Activity Actions

Invite Token Exposed in URL #16

New issue
Open
opened 2025-10-17 21:21:05 +00:00 by theis · 0 comments
theis commented 2025-10-17 21:21:05 +00:00
Owner
Copy link

The admin panel generates invite links with the secret token directly in the URL's query string. This is insecure as URLs are often logged by browsers, proxies, and servers.

The admin panel generates invite links with the secret token directly in the URL's query string. This is insecure as URLs are often logged by browsers, proxies, and servers.
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
main
preview_player_ui
voice_management_settings
single_sign_on_integration
0.5.1
0.5.0
0.4.0
0.3.0
0.2.92
0.2.91
0.2.9
0.2.8
0.2.7
0.2.51
0.2.5
0.2.4
0.2.3
0.2.2
0.2.1
0.2.0
Passkey-Base
0.1
Labels
Clear labels   
bug
Something that is broken and need fixing or misbehaving

  
Clean up

   
feature

   
improvment
No labels
bug
Clean up
feature
improvment
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
theis/webspeaker#16
No description provided.