Open savornicesei opened 3 years ago
I agree this maybe isn't the most clever design. However, there is a quick fix for this, enabling HTTPS :)
That is not a fix 😄
Putting the password in the request body instead does not exactly stop sniffing attempts. Use HTTPS.
Hi all,
When entering OpenSubtitiles credentials in Jellyfin, it redirects to
where my_username and my_password are my credentials for OpenSubtitles.org, in plain text.
It seems they're kept in the url even if I leave the plugin page:![image](https://user-images.githubusercontent.com/917232/120353442-58b0c080-c30a-11eb-8f86-a1b87319ff06.png)
For security reasons they should not be passed in plain text and in the query string.
Thank you.