search

GChristensen / torrent-add

GNU General Public License v3.0
14 stars 1 forks source link

password is escaped when passed to qBittorrent #10

Closed filimonic closed 8 months ago

filimonic commented 8 months ago

password is escaped when passed to qBittorrent-nox, and qBittorrent-nox does not respect this

Example: URL : http://qbt.domain.tld.net/api/v2/auth/login Username: admin Password: sl!mShady

torrent-add posts to /api/v2/auth/login : username=admin&password=sl%21mShady,

qBittorrent webUI posts : username=admin&password=sl!mShady

filimonic commented 8 months ago

my bad, seems I had was a problem in qBT CSRF protection.