Discuss Scratch

Amolorty
Scratcher
14 posts

Uploading to Scratch Assets

My browser / operating system: Windows NT 10.0, Firefox 112.0, No Flash versions detected

Ok so: I'm using a scratch extension to make my life easier. This extension has an option to upload to scratch assets and i think this is a HUGE security concern.
See here to prove I was there: https://assets.scratch.mit.edu/get_image/.%2E/5b122c6b75baaf7f9f3c536a2c971398.png

And anyone can say “hey guys look at this free scratch promotion! free followers if you just look at this image! you can see its valid because its from scratch.mit.edu”
example:
https://assets.scratch.mit.edu/get_image/.%2E/5b122c6b75baaf7f9f3c536a2c971398.png

so yeah, don't you guys agree?


Amolorty wuz here
PhiPhenomenon
Scratcher
500+ posts

Uploading to Scratch Assets

Scratch Assets is used to store all the costumes and sounds on Scratch's servers, so if you want people to stop uploading images there you might as well shut down the functionality of the editor. But anyway, this doesn't need fixing in the first place because it isn't concerning at all. Sharing a project with the image is almost the same thing, but we have an excellent way to prevent this.

The report button would be excellent for this situation. If you see something inappropriate in any part of the site, the report button should always be there. So if there's the image hosted on assets isn't appropriate, just report the comment or project you saw it on.
Amolorty
Scratcher
14 posts

Uploading to Scratch Assets

Oh, sorry! I didn't know this is what the costumes are stored on.


Amolorty wuz here

Powered by DjangoBB