It is possible to download attachments from box without any authentication or authorization
Hi,
I tried the following scenario:
1- Opened box folder that I'm assigned as viewer on it.
2- Downloaded the file and watched the url logged in Firebug.
3- Copied the url and accessed it from and another machine .
I was able to download the file without being asked to login.
Is there a way to prevent downloading files without authentication ?
Please sign in to leave a comment.
Comments
0 comments