Algolia: User with limited access to Index configuration can rename the Index

HI, I just noticed that user with limited access to any index can still rename it by replaying the old request after changing some values in the post request. Steps: 1. Invite user to your application. 2. Give User full access. 3. Now login the invited account, and create an index. 4. Go back to...

Algolia: an xss issue

i found an xss issue here : https://www.algolia.com/explorer?index=test&tab=ranking i tried to put an xss payload " in index ranking so i put the xss payload in Ranking formula then hit save ...when it is being saved the xss payload is being stored that upon Indices xss payload executed p.s pleas...