Security Major Issue

[proudloyaltier]

How to test

1. Open Synco and click create story
2. Open console and type in localStorage.name = "<whatever name>"
3. Click create, it will now post with the modified name

How to fix

firebase.auth().onAuthStateChanged(function (user) {
  setInterval(function () {
    if (firebase.auth().currentUser) {
      if (localStorage.name !== user.email.replace("@fakeemail.com", "")) {
        signout()
      }
    }
  }, 100)
})

@TelOfLolth and @prealge This is a major security issue, place this code at Line 20 of db.js