Skip to content

Preventing public database sabotage through server-side validation for --replace #18

Description

@Verryx-02

Related to #17

Problem:

The shared database system is vulnerable to malicious --replace submissions.
A user could intentionally submit incorrect matches (e.g., rickrolls, memes, or unrelated songs) and sabotage the database.

Possible Solution:

Before accepting a --replace into the global database, the server performs a lightweight plausibility check to determine if the proposed YouTube link could reasonably be a match for the given Spotify track.

Note:

The client answers the question:
"Which song on YouTube is the PERFECT match for this song on Spotify?"

The server, on the other hand, must answer the question:
"Is this song on YouTube a PLAUSIBLE match for this song on Spotify?"

Metadata

Metadata

Assignees

No one assigned

    Labels

    --replaceEverything that has to do with replace modeNot NowenhancementNew feature or request

    Projects

    Status
    Not Now

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions