doodoo
doodoo copied to clipboard
Isn't this insecure?
https://github.com/Mikepicker/doodoo/blob/bd789f93712847f26070c7ecdc838a2b4542c85c/index.html#L219
The way you are using the authID means it could be spoofed possibly? The collection should really have a filter on it only allowing access by the same request author?