Dev Blog: A closer look at the CSM 13 voting numbers

Only logged-in Omegas can generate valid votes and each account can only generate one vote.

Our suspicion right now is that someone found a way to edit the contents of their one vote, thus invalidating it.

My suspicion is that someone intercepted the POST request, modified it and sent to your backend. If you do not validate the input then you have a problem CWE-20: Improper Input Validation. I play like that everyday :sunglasses: To bad the voting is disabled now and I can’t check it.

Props for the mysterious voter :smiley:

4 Likes