diff --git a/tracker.org b/tracker.org index ae27108e..c8bc4c3f 100644 --- a/tracker.org +++ b/tracker.org @@ -1903,8 +1903,8 @@ Now, this is handled via the backend on the login page. So the 1st reason to host the login page was convenience and bug fixing and not necessarily security. -Regarding security, I was very afraid to introduce a security bug. -Because, the login page is clearly a nice entry point for security attack. +Regarding security, I was afraid to introduce a security bug because, the +login page is clearly a nice entry point for security attack. So I tried to be as conservative as possible. So no js when possible. And if we need to use js, do not use any lib, just basic javascript so the