eidogo
eidogo copied to clipboard
Web-based Go app and embeddable SGF viewer
eidogo.com is vulnerable to LFI in the SGF file upload in "Fetch SGF from a URL". A malicious actor can exploit this vulnerability to retrieve sensitive files that stored in...
EidoGo is susceptible to Cross-Site Scripting (XSS) attacks via maliciously crafted SGF input. There are actually two separate XSS vulnerabilities: 1) Text from comments and game info are unsafely added...
http://eidogo.com/upload Under the option "paste raw SGF" I tried opening an SGF file in notepad and got this text: https://pastebin.com/raw/PaFjvbr6 When I copy/paste it into the eidogo box, I get...
As of Firefox 65, it no longer generates keypress events for arrow keys. This diff switches to using keydown on newer Firefoxes. Tested in Firefox 66 and Chrome 73.
When placing a marker, and then trying to clear it, it does not work. This happens when there is one marker. Example: 1. Place Letter marker. 2. Clear marker. Expected:...
Attempts to patch some security vulnerabilities
Hi, what do you think about improving the quality of the images? I have not tested this on an iPhone, only in file:///Users/joachimneumann/projects/eidogo/example.html Greetings from Barcelona - Joachim
Hello eidogo developers, I'm writing a tsumego solving js library and found that eidogo can simplify my debugging experience: eidogo can render the search tree and help me understand where...
http://www.dragongoserver.net/game.php?gid=769859 does not load. possibly related to [this line](https://github.com/jkk/eidogo/blob/be1f959a44f8b9136da650184e93c015ea297774/player/js/player.js#L535) looks like EidoGo is fatally flawed for not taking all board sized into account.
Variations can be edited/extended in the problem mode, which causes the original programming of the problem to be overridden. For example, clicking on the back button after an automatic response...