Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Burn After Reading and JS disabled #89

Open
SoniEx2 opened this issue Jun 18, 2015 · 2 comments
Open

Burn After Reading and JS disabled #89

SoniEx2 opened this issue Jun 18, 2015 · 2 comments

Comments

@SoniEx2
Copy link

SoniEx2 commented Jun 18, 2015

Currently if you have JS disabled and open a BAR paste, it gets deleted, even tho you didn't read it. My proposal is to move paste data loading to a script, and change how you access paste data to use, say, myzerobin/pastedata_<id> instead of embedding it into the page.

This would also solve IRC bots deleting BAR pastes when fetching page info.

@exec
Copy link

exec commented Aug 26, 2015

The way it works currently, the server accesses the data from the identifier, regardless of whether or not the crypto key is correct. This is because the crypto data is stored in the file along with whether or not the file is burn-on-read. As a part of fetching that data, it reads whether or not the file is burn-on-read, then if it is, wipes the file. That's the design of ZeroBin. A way to get around this would be to create a basic HTML page with an instant meta redirect to the content, then share that to the person who you intend to share the information with. Not very quick or easy, but it works.

@SoniEx2
Copy link
Author

SoniEx2 commented Aug 26, 2015

I don't care if it gets deleted if you use the wrong key, that's fine.

But if you delete it when JS is off...

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants