cookies were stored with plain text
EnderAvaritia
VCC version: 2.4.5
Description of the bug:
user's cookies were stored with plain text in pc and can be stolen to delete user's avatars and worlds
i think this storage method is not safe and these operation with high risk should need one more check
Log In