Credentials are saved unencrypted in defaults

Leandros / ownDrop

Your One-Click upload client for ownCloud

http://dev.arvid-g.de/ownDrop

GNU General Public License v3.0

53 stars 5 forks source link

Credentials are saved unencrypted in defaults #9

Closed oldskirt closed 10 years ago

oldskirt commented 10 years ago

Any (non-sandboxed) process can read the user's defaults. So saving the ownCloud credentials as basically plain text is a little irresponsible. The Keychain exists for a reason.

Leandros commented 10 years ago

I'am aware of this and I know the keychain, it'll be changed in a future version.

Leandros commented 10 years ago

Fixed in f1d2a079b60ae815220a7d51b3d1618eef8d0c72