Comment by rnotaro

I love breaking things and I've noticed that user are able to intercept the UID / ID of the received messages in the Websocket and edit / spoof past messages from other users.

edit: And editing other user names and rooms settings.

Just letting you know. :)