1
Fork 0
mirror of https://github.com/jech/galene.git synced 2024-12-22 15:25:48 +01:00
galene/webserver
Juliusz Chroboczek 03038eaf45 Obfuscate WHIP ids.
If the WHIP session is not authenticated, then the only thing
preventing an attacker from DELETEing the session is the session
URL.  Since client ids are known, obfuscate the id before using
it in the session URL.
2024-01-11 22:05:07 +01:00
..
webserver.go Use url.JoinPath in webserver. 2023-12-09 17:40:04 +01:00
webserver_test.go Obfuscate WHIP ids. 2024-01-11 22:05:07 +01:00
whip.go Obfuscate WHIP ids. 2024-01-11 22:05:07 +01:00