Able to access images without authentcation
[[ Bug ]]
When I attach an image to a transaction, a unique link is generated for it. People with this link should not be able to view it. Authentication is required.
Sorry for the trouble! This is actually intentional – we think there are situations in which people might want to share links to receipts or attachments with people who are not logged in to Splitwise. URLs for uploads are randomly generated, so it shouldn’t be possible for someone to guess a URL or find your image by accident.