Risk of (accidental) data leakage

[JaneX8]

I described my security issues with the upload functionality here: https://github.com/orgs/asciinema/discussions/21#discussioncomment-16058041.

I am not sure if PowerSession.exe currently honors these variables, I suggest implementing them for functionality reasons:

export ASCIINEMA_SERVER_URL=http://asciinema.invalid # CLI 3.x
export ASCIINEMA_API_URL=http://asciinema.invalid # CLI 2.x

However I suggest to at least (for now) deviate from the original project by disabling upload before auth was ever used, as I described here: https://github.com/orgs/asciinema/discussions/21#discussioncomment-16058138.

[ibigbug]

I'm not quite following.

The auth endpoint is on your computer so it that's modified unexpectedly without you permission - there must be something wrong more seriously?