Y
Hacker News
new
|
ask
|
show
|
jobs
by
alwayslikethis
456 days ago
It doesn't seem to be.
1 comments
pcthrowaway
456 days ago
Do you have an example? As per their docs, they do put the encryption key after the '#':
https://github.com/cryptpad/cryptpad/blob/main/docs/ARCHITEC...
link
alwayslikethis
456 days ago
Oh, I wasn't aware that slashes can follow the #. In that case it seems to be. Thanks for the correction. So the only concern here is injecting js to exfiltrate the key then.
link