markup.rocks icon indicating copy to clipboard operation
markup.rocks copied to clipboard

Use of LocalStorage is shared between all IPFS content

Open jes opened this issue 8 years ago • 1 comments

This application uses LocalStorage to store the "Last File" (filename) and "Last Document" (file content) keys.

Since markup.rocks is distributed over IPFS, and since every IPFS page is accessed from the same domain (the gateway), these keys are available to all other IPFS pages.

I'm pretty sure this isn't the only application that is vulnerable, and I don't yet know what the best fix is, but it's at least worth being aware of this.

jes avatar May 10 '17 07:05 jes

E.g. check out https://ipfs.io/ipfs/QmYuNaKwYFjXipWufudu9Ru8NweJ322qwsPZWatWij1i2f after storing something using markup.rocks - it's a completely unrelated IPFS page but has access to all of the content.

jes avatar May 10 '17 07:05 jes