tracker.org

This commit is contained in:
Yann Esposito (Yogsototh) 2021-12-21 11:45:19 +01:00
parent 0cabeedc5e
commit 73ccedc283
Signed by untrusted user who does not match committer: yogsototh
GPG key ID: 7B19A4C650D59646

View file

@ -1903,8 +1903,8 @@ Now, this is handled via the backend on the login page.
So the 1st reason to host the login page was convenience and bug fixing and
not necessarily security.
Regarding security, I was very afraid to introduce a security bug.
Because, the login page is clearly a nice entry point for security attack.
Regarding security, I was afraid to introduce a security bug because, the
login page is clearly a nice entry point for security attack.
So I tried to be as conservative as possible.
So no js when possible.
And if we need to use js, do not use any lib, just basic javascript so the