Original replay files aren't filtered at all.
This could be used to extract cookies, though, which would be bad if I ever moved it onto the Showdown domain. I guess the solution would be to either prevent replay files from being viewable, or start filtering them.
I'll do one of those when I ever move domains. :/
Originally Posted by Fat whitefag
And what if I upload replay with filename equal to already existing upload? Can't I replace some featured replay with mine?
Yeah, I wanted to have a feature that let you edit replays, but there wasn't any good way to confirm you were the person who uploaded the original replay.
Oh, well, it's disabled now.