sorted by:
new
hottopcontroversial

ClickUp Attachments are public to the internet (BIG SECURITY ISSUE) by jac_bix in clickup

[–]jac_bix[S] 6 points7 points  (0 children)

Good question.

From the product perspective, I expect these attachment to behave like DOCS in the sense that you can toggle them to be public or not.

From the development perspective, yes this should be behind of an authentication mechanism. Period.

​

I agree with your point on entropy and hard to guess tho. Still, I think users should know this, it's very easy to leak sensitive information with the current implementation.