Michael

Projects like this scare me. You're trying to get a business model going, but everything about this shouts at me that this was quickly thrown together without any form of knowledge on security and how to handle user data. Within minutes I found several ways of executing code on users' computers with the "Share Public Link" functionality. When I found the first one (XSS via URL), I could let it...