Comments (12)
Did you setup a local Meower server? https://github.com/meower-media-co/Meower-server#readme
from meower-vanilla.
Do I have to?
from meower-vanilla.
For security purposes, the publically available source code of Meower doesn't have a valid security key to gain trust on the Meower server. To demo the source code, you will need to be running a local meower server.
from meower-vanilla.
Speaking of trusted access, you can already find the security key with a bit of searching in the project.json of the meower.org release of meower, which you can find pretty easily too.
from meower-vanilla.
Speaking of trusted access, you can already find the security key with a bit of searching in the project.json of the meower.org release of meower, which you can find pretty easily too.
That is true, we plan on obfuscating this through custom JS provided through Github secrets, but this is still in the planning stages.
from meower-vanilla.
That is true, we plan on obfuscating this through custom JS provided through Github secrets, but this is still in the planning stages.
What about some other way of implementing trusted access, like with CORS? Ofc people would still be able to bypass it but it will be a slight bit harder and plus you can combine it with other types of security. (BTW, also how would custom JS be providable by github secrets?)
from meower-vanilla.
That is true, we plan on obfuscating this through custom JS provided through Github secrets, but this is still in the planning stages.
What about some other way of implementing trusted access, like with CORS? Ofc people would still be able to bypass it but it will be a slight bit harder and plus you can combine it with other types of security. (BTW, also how would custom JS be providable by github secrets?)
something @wgyt mentioned in dizzycord. Idk how they planned it would work. more r&d needed.
from meower-vanilla.
What about some other way of implementing trusted access, like with CORS? Ofc people would still be able to bypass it but it will be a slight bit harder and plus you can combine it with other types of security. (BTW, also how would custom JS be providable by github secrets?)
something @wgyt mentioned in dizzycord. Idk how they planned it would work. more r&d needed.
that was an idea for new pipeline, but i realized its a PITA to do new pipeline with built in packager, so we would need to build the html file ourselves and pushing it, making the custom JS idea pointless when we can just add the key manually
from meower-vanilla.
Also there's still the way of just opening your developer console, going to network and watching the WebSocket connection.
from meower-vanilla.
meower is now a key of the meower server, can be fixed by changing the server to connect to to server.meower.org.
from meower-vanilla.
from meower-vanilla.
Did you setup a local Meower server? https://github.com/meower-media-co/Meower-server#readme
Half a month later, I figured it out.
from meower-vanilla.
Related Issues (20)
- Home reverses when cancelling create post HOT 1
- Make client use REST API more HOT 2
- Better dark theme HOT 6
- UI Bug HOT 3
- E:109 Make's meower think the servers are down. HOT 3
- BGM is completely broken HOT 1
- Graphical glitches with home and messages screen HOT 7
- Make new messages appear while typing HOT 1
- B6P1 Modules//GUI: Setting RGB colors to sprites sometimes doesn't work as expected HOT 1
- B6P1 MeowEngine//Renderer: Maximum scroll range is sometimes buggy HOT 1
- B6P1 Performance issues (Stutter/lagspikes while scrolling) HOT 1
- Patch: BG Music Selection Blank? HOT 3
- Upgrade to CL4 HOT 2
- unread icon for inbox
- change password
- the end of an era HOT 2
- Remove unused features / Update password code HOT 2
- How do i package the project? HOT 1
- How do i Package the project HOT 6
- Client is screwed HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from meower-vanilla.