felixhageloh / uebersicht-widgets

A collection of community widgets for Übersicht
362 stars 106 forks source link

Security Issue with Wunderlist Widget #107

Closed asachs01 closed 9 years ago

asachs01 commented 9 years ago

Hiya Ubersicht team,

Just a heads up--it seems that the Wunderlist widget is passing usernames/passwords over plain text on :80. I only mention this as I was using the widget (and rather sheepishly, I didn't check on this), but now my account's closed/inaccessible. I know--my fault for not being a bit more savvy here, but I'm not sure that having the widget around with it passing the info over :80 is a good thing.

Aaron

felixhageloh commented 9 years ago

Thanks for reporting and sorry to hear your account has been closed! There is actually a repo for this widget: https://github.com/NikitaBazhenov/UbersichtWunderlistTask (I'm not the author), so its probably best to report the issue there

asachs01 commented 9 years ago

Hey Felix!

Thanks for pointing me in the right direction. I've contacted Nikita, so hopefully he can push out a fix.

Thanks, Aaron