Fundamental Flaw in the App · University of Code

Fundamental Flaw in the App

Its not super terrible and buttoned up pretty nicely with the disabling of chatting. However a user can still create video pages by just entering the ID on the url and procced to the video analysis page.

Could this open up potential for abuse?

AAANNNDD yes it has. SO

If I go to the video page by URL and then inspect source and go to the button and remove the disabled feature from the page source we can easily chat with our application beyond the limits and use the other features this way as well.

SOOOO What we gone do about this papafam?

Lets start brainstorming a solution to this here in this thread, and of course I will report back when I find a solid solution.

18 comments