Static export leaks list of all conferences on that pretalx instance, including images #488
A static Fahrplan export for a conference must only export data pertaining to that conference and not export any data regarding another conference that is organised with the same pretalx instance.
When downloading the static export of one conference as a .zip archive that archive contains a
Steps to Reproduce
This leaks slugs and hence existence of all conferences on that pretalx instance, even conferences that aren't yet public. While the slugs themselves are unlikely to be really sensitive the images might as well be.
The text was updated successfully, but these errors were encountered: