/disconnect probably shouldn't exist #6

Open
opened 2026-06-14 00:14:03 +00:00 by colby · 0 comments

Bad actors can log you out of inspektor.5apps.com to be a nuisance:

<meta http-equiv="refresh" content="0; URL='https://inspektor.5apps.com/disconnect'" />
kbye

At the very least, the /disconnect page, when not routed into from one of inspektor's own application views, should show a widget with a helpful message prompting you to log out if that's what you're really trying to do, but otherwise allow you to go back to the main view. (If you want to be really, really helpful, you could parse document.referrer and explain that the host derpy.example.com is responsible for taking them to the page to log out.)

(Perhaps also, as an alternative, prompt the user to connect to a different storage provider, in case they really meant to log out, and that was supposed to be the next step.)

Bad actors can log you out of inspektor.5apps.com to be a nuisance: ``` html <meta http-equiv="refresh" content="0; URL='https://inspektor.5apps.com/disconnect'" /> kbye ``` At the very least, the `/disconnect` page, when not routed into from one of inspektor's own application views, should show a widget with a helpful message prompting you to log out if that's what you're really trying to do, but otherwise allow you to go back to the main view. (If you want to be really, really helpful, you could parse `document.referrer` and explain that the host `derpy.example.com` is responsible for taking them to the page to log out.) (Perhaps also, as an alternative, prompt the user to connect to a different storage provider, in case they really meant to log out, and that was supposed to be the next step.)
colby changed title from /disconnect shouldn't exist to /disconnect probably shouldn't exist 2026-06-14 00:14:12 +00:00
Sign in to join this conversation.