-
-
Notifications
You must be signed in to change notification settings - Fork 331
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Security issues of tutorial #159
Comments
Good catch! For the first issue, the solution is to add |
Can I take this one? |
@liamjosephsilk yes! |
Yes, it's also an issue that anyone can post. however the tutorial didn't cover authentication, I think it doesn't matter. (of course, it would be very nice if it will be) |
Could we make use of authentication in the tutorial? Seen as it comes built in? Align it better with the current onboarding of setting up a project? |
Yeah would be good to add auth to this! |
I'm a little confused following the tutorial because auth seems to have been included in the app/generated code but there is no mention of it in the tutorial and there are inconsistencies because of it. Perhaps there should be a way to start a project with no auth so that following the tutorial makes more sense. |
@goleary yeah sorry about that, we need to update the tutorial. |
The tutorial seems to have security issues that anyone can
I think it should be added a security note or a new section about how to fix the issues.
Demo in browser console:
![image](https://user-images.githubusercontent.com/21266306/92950144-2c60c580-f497-11ea-9cea-344d2004b381.png)
The text was updated successfully, but these errors were encountered: