Security issue: Password in URL

FreeRDP / FreeRDP-WebConnect

A gateway for seamless access to your RDP-Sessions in any HTML5-compliant browser

519 stars 1.62k forks source link

Security issue: Password in URL #99

Open webnew opened 9 years ago

webnew commented 9 years ago

Password is sent with URL as parameter and can be seen in the history of the browser. Parameters should be sent via POST not GET (image shows an internal test sample):

c64cosmin commented 9 years ago

This issue was solved with the last merge request.