verbal geyser
Looks quite neat, might give it a test to see how it compares against Reverb.
One question, I see this mentioned in the docs; https://github.com/RustNSparks/sockudo?tab=readme-ov-file#publishing-events
Does that mean events can be sent without authentication? Reverb had this CVE, where the backend/api could just be consumed with public data
verbal geyser
Yes, as in, it's vulnerable to the same CVE? (https://github.com/laravel/reverb/security/advisories/GHSA-pfrr-xvrf-pxjx)
serene forge
give me a minute 🙂
oh
sadly i have the same vulnerability
but don't worry
i am going to fix it
Thank you
Can you write an issue?
if you have time ofcourse
serene forge
Hey @verbal geyser i think i fixed it
serene forge
@verbal geyser di you manage to play with it?
serene forge
i opened some pull requests to add support in laravel
serene forge
@verbal geyser
next ice
It has been barely a day, i don't think spam pinging like that is going to make him want to try it. It's the equivalent of a child constantly poking you in the arm