HN
Hacker News
Top
New
Best
Ask
Show
Jobs
Comment by alwayslikethis | Hacker News Reader
Parent
Full thread
alwayslikethis
·
It doesn't seem to be.
View on HN
pcthrowaway
·
Do you have an example? As per their docs, they do put the encryption key after the '#':
https://github.com/cryptpad/cryptpad/blob/main/docs/ARCHITEC...
alwayslikethis
·
Oh, I wasn't aware that slashes can follow the #. In that case it seems to be. Thanks for the correction. So the only concern here is injecting js to exfiltrate the key then.
Reply on news.ycombinator.com