Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

At least warn people on form submissions #91

Open
jon-betts opened this issue Jan 5, 2021 · 1 comment
Open

At least warn people on form submissions #91

jon-betts opened this issue Jan 5, 2021 · 1 comment
Labels
Via Abuse Ideas for reducing abuses of Via

Comments

@jon-betts
Copy link
Contributor

At the very least you should get a warning when attempting to submit a form through Via. We might even want to block it.

This would mean people cannot get to content behind a login wall in Via. They could use the browser plugin however.

@jon-betts jon-betts added this to the 3 - Start adding additional protection milestone Jan 5, 2021
@robertknight
Copy link
Member

robertknight commented Jan 5, 2021

At the very least you should get a warning when attempting to submit a form through Via. We might even want to block it.

Since Via already blocks cookies, that de-facto prevents many forms that accept personal information from working already - but without any kind of indication to the user that this is the case. I agree that we could definitely prevent submission of certain forms, such as those that contain fields that definitely expect personal information (eg. password fields, phone number fields or fields labeled "email"). Blocking all fields may get in the way of some uses cases (eg. a search input), but I think we could afford to take a chance on this. The worst that happens is that the user needs to use the input field on the non-proxied version of the site.

@seanh seanh added Via Abuse Ideas for reducing abuses of Via and removed phishing labels Feb 15, 2021
@seanh seanh removed this from the Ideas: Prevent unwanted uses of Via milestone Feb 16, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Via Abuse Ideas for reducing abuses of Via
Projects
None yet
Development

No branches or pull requests

3 participants