BohwaZ on Nostr: I don't recommend #AfterLogic Webmail. They don't really care about security. They ...
Published at
2024-09-19 14:30:34Event JSON
{
"id": "6cbd3014ee612e2ba83a00b0988e7f95cbb93bf95070be31b45fc55673bd332f",
"pubkey": "b85a4b6447dfb49ed7b8b6c82f39a0cb50243f56485a0fe3e083813076c5338a",
"created_at": 1726756234,
"kind": 1,
"tags": [
[
"t",
"Afterlogic"
],
[
"proxy",
"https://mamot.fr/users/bohwaz/statuses/113164696611398508",
"activitypub"
]
],
"content": "I don't recommend #AfterLogic Webmail. They don't really care about security. They ship 63MB of dev dependencies, publicly accessible if you install this on your server, and they don't think it might be an issue: https://github.com/afterlogic/webmail-pro-8/issues/17#issuecomment-2337240133\n\nThe vendor folder is also exposed, but again, no problem: https://github.com/afterlogic/webmail-pro-8/issues/18",
"sig": "61ba5c6cfa4ee00e68aa246e95b89182795d5fd3b0309efa2f8551adeb6796ea8215296e0d6fe7c4dd1e8dc9175b66ca3a2b02d4ba157a9bb056be1b0db8ea79"
}