@baris said:
We had no reports of anyone altering socket.uid its a server side only value.
A while back there was a certain vulnerability (not NodeBB specific), I don't exactly remember what it was, but it allowed a user to mimic another user, even an admin, and do pretty much everything as that user.
Now you have one report 😉
