The web UI will allow a client-generated private id to be used (by altering the value of the hidden new_url input), which allows a malicious user to view and/or modify a note without detection.
After viewing the note, the malicious user only needs to re-create it using the same private id and (optional) passphrase. The note could be identical or modified, and there is no way for the intended recipient to detect this. A note can also be overwritten without being viewed first if the private id is known.
I recommend using a server-side secret to validate that the private id was generated on the server and not by a malicious user. It would also be a good idea to include a timestamp to validate the private id was generated recently.
The web UI will allow a client-generated
private idto be used (by altering the value of the hiddennew_urlinput), which allows a malicious user to view and/or modify a note without detection.After viewing the note, the malicious user only needs to re-create it using the same
private idand (optional) passphrase. The note could be identical or modified, and there is no way for the intended recipient to detect this. A note can also be overwritten without being viewed first if theprivate idis known.I recommend using a server-side secret to validate that the
private idwas generated on the server and not by a malicious user. It would also be a good idea to include a timestamp to validate theprivate idwas generated recently.